OSQL.EXE
by Microsoft
Database
Summary
SQL Server command-line query tool (legacy)
OSQL.EXE is the 2463rd most commonly executed Windows program in EchoTrail's dataset, observed 174 times across enterprise environments. It typically runs from D:\Program Files\Microsoft SQL Server\120\Tools\Binn and it is most often launched by cmd.exe.
2463rd
most commonly executed Windows program
174
observed executions
low
statistical confidence
Behavior
Top Paths
- D:\Program Files\Microsoft SQL Server\120\Tools\Binn81.61%
- D:\Program Files\Microsoft SQL Server\150\Tools\Binn18.39%
Top Hashes (SHA256)
- ae5266af15a59ad176cd7aeafa46de5c1c891f772f133c3adc22f4106fb265bd58.62%
- 17c0334fefa256379e3b6406bfc473c077021f34bf58f9aea4245623f78d5d9e22.99%
- bce36b51e0f5c35d6f55ddebf9dfb06e0a09498335f513cdadc5f1974e6463f211.49%
- 3f68013836973513633c65277d9ec9de5d104870e212eaaf5077ce892d6a04935.75%
- 98da714fc30de334691deff5b535208663f3baddbabb70f31559d977b83c02dc1.15%
Process Ancestry
Top Parents
- cmd.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about OSQL.EXE
Rocky answers questions about OSQL.EXE grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.