Mozilla Thunderbird
Named by 4 kept items in this workspace.
3 items name it under affected products and 1 under classification.technologies.
Search every workspace for Mozilla Thunderbird. It matches the name as written, so it can find other things that share it.
The items that name it 4
user-agent seen in the NTLM EWS requests
All technologies in this workspace.