Rocky Raccoon

cl.exe

by Microsoft
Development Tool

Summary

Microsoft Visual C++ compiler

cl.exe is the 2724th most commonly executed Windows program in EchoTrail's dataset, observed 131 times across enterprise environments. It typically runs from D:\Program Files (x86)\Microsoft Visual Studio\2022\Enterprise\VC\Tools\MSVC\14.29.30133\bin\HostX86\x86 and it is most often launched by devenv.exe.

2724th
most commonly executed Windows program
131
observed executions
low
statistical confidence

Behavior

Top Paths

  • D:\Program Files (x86)\Microsoft Visual Studio\2022\Enterprise\VC\Tools\MSVC\14.29.30133\bin\HostX86\x8645.8%
  • C:\Program Files (x86)\Microsoft Visual Studio 14.0\VC\bin\x86_amd6427.48%
  • C:\Program Files (x86)\Microsoft Visual Studio\2019\Enterprise\VC\Tools\MSVC\14.29.30133\bin\Hostx86\x8626.72%

Top Hashes (SHA256)

  • 792958483cc5ad5f69ddf4aa292096f5070ea5c4cb72839e99edfb5698dda80444.3%
  • b531da770c1fb28c0ea57d42dc94b438e4cec6ee35baf9815f3dd9897790adc325.07%
  • 69e5725d07c6cea7537d728f4212e2904283bad0b2511e98472bd2d2c5ade7fe14.75%
  • e5f78de5ee1c26b74db0b3f0cd1627b030d0c0b777c7f2166139f1e08a1bf1d413.16%
  • e4208d3e6a09087ad673cb061559f6f16259218fe9d88f6617fdf33f28c594fb1.53%
  • 3f87f1c2b9569a0bc11c4c0bc5274d94ef3ab0fa588e0fc15510ebfdc5b123ee1.2%

Process Ancestry

Top Grandparents

Top Parents

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about cl.exe

Rocky answers questions about cl.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.