ThunderboltRegModule.exe
Summary
Intel Thunderbolt Registration Module - handles Thunderbolt device registration and firmware updates.
ThunderboltRegModule.exe is the 520th most commonly executed Windows program in EchoTrail's dataset, observed 10,743 times across enterprise environments. It typically runs from C:\Windows\Temp\... and it is most often launched by ThunderboltZeroInv.exe.
Behavior
Top Paths
- C:\Windows\Temp\...99.67%
- C:\Temp\...0.28%
- C:\Users\...0.06%
Top Hashes (SHA256)
- 9511cf4aee6882d33f42d189d88e8324fd9d01331f672e7e02c962dc3443423a11.74%
- 53101172605797141b1265291283a5f81207073ac8a34446746b05f97b13060a4.39%
- c78c6021b7b46793f30f48e9b11dcd6ff453f2ab97518324db71cf98cee036cb3.44%
- d630d9f7466dd6cdf3ea08b829a1b95f05ddc0e98c950a9a35be714ffbd97efb3.26%
- 190b0fe66b895d70ccce1f87d10acccee3f8448f68cf91466db9cd65a6bc23b63.2%
- 38282e078d87c4704c7d3577ad814684ce84870a1442e37672e78ac44a7a05342.91%
- 44be8e90ab94b16e7b842d91b4aa1e60f8fde4019f6e87d4305a3e3eb28d71582.67%
- e237464084ad07824c26d48b744acc4acdb164ba7a44856c9b43971b21502b982.44%
- 29da2700c0f2662c0b6ee77e4c097a8f0637fcbc091bc2ff9265d7277c7f14632.43%
- 6795545d2791a833921d2a522a9ebbdfb3436cf0a12a1228c550497bcdc97dd32.43%
Process Ancestry
Top Grandparents
- invcol.exe100%
Top Parents
Top Children
- drvupdate.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about ThunderboltRegModule.exe
Rocky answers questions about ThunderboltRegModule.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.