There is a new tool available for download at
ProcInterrogate is similar in functionality to FileInterrogate (Formerly known as WinInterrogate). The difference between the two tools is ProcInterrogate Enumerates running process and FileInterrogate Enumerates the file system.
A better way to describe the tool would be to show the usage and an example output:
procinterrogate.exe Version 0.0.1
by Kirby Kuehl (

-list        Lists All processes, process ids and their associated dlls.
-ps          Displays Process list
-pid    Lists DLLs associated with a proccess id
The -md5 and -ver options can be combined with the -list and -pid options only.
-md5         Calculate md5 sums of proccesses and their associated dlls
-ver         Obtain version information of associated dlls
-o or -output Output filename. (procinterrogate.txt by default)

Example Output:
procinterrogate.exe -list -md5 -ver
Note: This is just one process
C:\WINNT\System32\smss.exe (Process ID: 160)

Entry Point  Base Size       Module
0x4858983E   0x48580000 0000E000   \SystemRoot\System32\smss.exe

Entry Point  Base Size       Module
0x00000000   0x77F80000 0007B000   C:\WINNT\System32\ntdll.dll
Version: 5.0.2195.5400
Creation Time: 12/31/1979 23: 0
Last Accessed Time: 11/6/2002 19:46
Last Write Time: 7/22/2002 11: 5
File Size: 490768 bytes
CompanyName Microsoft Corporation
FileDescription NT Layer DLL
InternalName ntdll.dll
LegalCopyright Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename ntdll.dll
ProductName Microsoft(R) Windows (R) 2000 Operating System
ProductVersion 5.00.2195.5400
MD5: ce5805407931ad0204b9c34e6a1c96a8
As always any feedback is appreciated,
Kirby Kuehl