Agenda ransomware Rust variant avoids encrypting files with the following strings in their file names:

basemisc.tgz
boot.cfg
bootpart.gz
features.gz
imgdb.tgz
initrd
jumpstrt.gz
onetime.tgz
state.tgz
useropts.gz
vmlinuz
$recycle.bin
$windows.~bt
$windows.~ws
admin$
appdata
application data
boot
config.msi
google
intel
ipc$
mozilla
msocache
netlogon
perflogs
program files
program files (x86)
programdata
system volume information
sysvol
tor browser
windows
windows.old