1. A computer-implemented method comprising: initiating a first classification process for a first executable, wherein the first classification process performs a test compilation by invoking the first executable with a test compilation file; intercepting a request to execute a second executable in a second newly created process invoked due to the test compilation being performed by the first classification process; initiating a second classification process for the second executable including invoking the second executable with the test compilation file; determining, by the second classification process for the second executable, that no other classification process recorded an indication that another classification process was invoked during a test compilation performed by the second classification process; in response, classifying the second executable as a compiler; determining, by the second classification process, that the second classification process was invoked with a reference to the test compilation file; in response, recording an indication that the second classification process was invoked with the reference to the test compilation file; determining, by the first classification process, that the second classification process recorded the indication; and in response, classifying the first executable as a wrapper that wraps the compiler.