thunderbird.exe

by Mozilla
Communication

Summary

Mozilla Thunderbird email client

thunderbird.exe is the 2516th most commonly executed Windows program in EchoTrail's dataset, observed 163 times across enterprise environments. It typically runs from C:\Program Files (x86)\Mozilla Thunderbird and it is most often launched by explorer.exe.

2516th
most commonly executed Windows program
163
observed executions
low
statistical confidence

Behavior

Top Paths

  • C:\Program Files (x86)\Mozilla Thunderbird95.09%
  • C:\Users\...4.91%

Top Hashes (SHA256)

  • 31c3b4b95bf691a82f022b706d2b66c2ae1cd891dc7fd2416929fd7a9a74ed1b21.47%
  • f469a194e431539d8b1512e441675a00c2648f1b0283cd130d8d157e4fe7b4d920.25%
  • 10ffc015702ed3bd0412877dac26116a0d5660211a48706a32d9931723e84a8318.4%
  • 5b69791ca9cf5b8d8e2fb777ffc038239e598088c4b511732d8177766dfeaa2714.72%
  • 725559f18e07c21910f2960a7b33e3b1b608e15cc3d7e8cf09dd138426003f6f11.04%
  • 0a22934d3e9e6de263ef122e5e2a71c437c629133838e3cb0eb89e0b14a405265.52%
  • c3c4eb7d6facedc41a29cf76ae55b3223c803a077d99dd5879ca3c894a9e033d5.52%
  • d94f6dda7a780e5a4b976d0a2bf4f5a76439941d2d0b727755335e3c72cdfba03.07%

Process Ancestry

Top Grandparents

Top Parents

Top Children

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about thunderbird.exe

Rocky answers questions about thunderbird.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.