ReAgentc.exe

File Path: C:\Windows\SysWOW64\ReAgentc.exe
Description: Microsoft Windows Recovery Agent

Hashes

Type	Hash
MD5	`1E411B75AE947557FC8031B417DC299B`
SHA1	`7710E1054F49470E328722AFBE5CFC35123D22B5`
SHA256	`3216BD1B40815DF22678EC7E7E5A0F9651E5C890BCE82EC29C6A2F1A6F38E878`
SHA384	`EA3C3E7568F8079E82EE747617208E5ABCD36393CB6BA2C427D01EF42550FFAA2735F4BB1FE06347597F7A10A7014F55`
SHA512	`3D48EA15A08E6D363AB10C1FA4337DD146029899039DA21107DFF5D4F51B00A639284BD8C5B18DFE4ADAFB1437DAFE51DCA9E9F0BB8FECB57B7F5EE063472C4A`
SSDEEP	`768:hD/vPgxZ2rKB2rInVAPQ97ACJItUtWP0aJo:hMxZ2rigISS8Cy2sMGo`

Runtime Data

Usage (stdout):

Configures the Windows Recovery Environment (Windows RE) and system reset.

REAGENTC.EXE <command> <arguments>

The following commands can be specified:

  /info             - Displays Windows RE and system reset configuration
                      information.
  /setreimage       - Sets the location of the custom Windows RE image.
  /enable           - Enables Windows RE.
  /disable          - Disables Windows RE.
  /boottore         - Configures the system to start Windows RE next time the
                      system starts up.
  /setbootshelllink - Adds an entry to the Reset and Restore page in the boot
                      menu.

For more information about these commands and their arguments, type
REAGENTC.EXE <command> /?.

  Examples:
    REAGENTC.EXE /setreimage /?
    REAGENTC.EXE /disable /?

Usage (stderr):

Configures the Windows Recovery Environment (Windows RE) and system reset.

REAGENTC.EXE <command> <arguments>

The following commands can be specified:

  /info             - Displays Windows RE and system reset configuration
                      information.
  /setreimage       - Sets the location of the custom Windows RE image.
  /enable           - Enables Windows RE.
  /disable          - Disables Windows RE.
  /boottore         - Configures the system to start Windows RE next time the
                      system starts up.
  /setbootshelllink - Adds an entry to the Reset and Restore page in the boot
                      menu.

For more information about these commands and their arguments, type
REAGENTC.EXE <command> /?.

  Examples:
    REAGENTC.EXE /setreimage /?
    REAGENTC.EXE /disable /?

Signature

Status: Signature verified.
Serial: 33000001733031072665B8B9B3000000000173
Thumbprint: 14590DC5C3AAF238FCFD7785B4B93F4071402C34
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: reagentc.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.14393.0 (rs1_release.160715-1616)
Product Version: 10.0.14393.0
Language: English (United States)