Wininterrogate 0.1.4 Documentation
Homepage: http://winfingerprint.sourceforge.net
Contact : vacuum@users.sourceforge.net
Description:
Wininterrogate recurses directory structures obtaining the following information according to filemask:
File Name
Complete Path
Directory
File Size
Creation Time
Last Access Time
Last Write Time
MD5 Checksum
Attributes

The following "Extra information" is gathered on *.DLL, *.VBX, *.DRV, *.EXE, *.OCX, *.BIN, and *.SCR files:
CompanyName
FileDescription
FileVersion
InternalName
LegalCopyright
OriginalFilename
ProductName
ProductVersion
Comments
LegalTrademarks
PrivateBuild
SpecialBuild

Wininterrogate also has the ability to match strings withing the contents of files.
Wininterroage can connect also be used to traverse remote NetBIOS shares.


Starting Directory
Wininterrogate will traverse directories starting at the directory you specify.
If your starting directory is c:\ then the entire C drive is queried.
If your starting directory is c:\windows then all subdirectories under c:\windows will be queried.
Filemask
The Filemask option supports wildcards. Useful examples would be *.* for all files, *.dll for all dlls, (any extension will work). Extended information is returned on (.dll, .exe, .drv, .scr, .bin, .ocx, .vbx, etc). You may also specify a single file in the filemask such as winsock.dll to obtain the information only on a specific file. Wildcards Explained:
A wildcard character is a keyboard character such as an asterisk (*) or a question mark (?) that you can use to represent one or more real characters when you are searching for files or folders. Wildcard characters are often used in place of one or more characters when you don't know what the real character is or you don't want to type the entire name.
Asterisk (*)
You can use the asterisk as a substitute for zero or more characters. For example, if you're looking for all dll files, type the following:
*.dll
Question Mark (?)
You can also use the question mark as a substitute for a single character in a name.
Search String (Optional)
Search the contents of files for the given search string. Similar in functionality to "strings" on the Unix platform.
Save As
Output filename.It is suggested that the .csv extension is utilized. Microsoft Excel is typically associated with this extension and will be automatically launched. Microsoft Access is capable of importing .csv data.
Connect

Maps a Drive letter to a remote NetBIOS share.
Disconnect
Disconnects a previously established drive mapping. Wininterrogate 0.1.4 and Microsoft Access
How to create an Access Database to be used with Wininterrogate…
Start Microsoft Access.
From the “Create a new database using” dialog, Select “Blank Access database”.
Name your Database, Click “Create”.
- or -
From the “File” Menu, Select “New”.
The default selection is “Database”. Click Ok.
Name your Database, Click “Create”.
From the File Menu, Select “Get External Data” then “Import…”
From the “Files of Type:” drop down box, Select “Text Files (*.txt;*.csv;*.tab;*.asc)”.
Select a .csv output file created previously with Wininterrogate.
Click Import.
Choose "Delimited - Characters such as comma or tab separate each field".
Click Next.
From the "Choose the delimiter that separates your fields:" menu, choose “Comma”.
Click Next.
From the “Where would you like to store your data?” Selection, choose “In a New Table”.
Click Next.
You are now given the opportunity to Name all of the fields.
I suggest naming them the same name as the first record.
Something slick happens in a few steps, so don't worry about Data Types just yet.
Leave the Size: Field's Data Type as Long Integer
Leave Creation Time:, Last Access Time:, and Last Write Time: Data Types all Date/Time.
When finished Naming all of the Fields, Click Next.
It is acceptable to choose my No Primary Key.
If you Choose your own Primary Key ensure that every entry will be unique (Complete Path:) is really your only good choice.
Choose the “Name of the Import to Table:” as “Wininterrogate Imported Data”:
Click Finish.
You WILL get an error message stating that not all of your data was successfully imported.
THIS IS WHAT WE WANT!
Click Ok.
You will now have a newly created table as well as a yourtablename_ImportErrors table.
You can review the _ImportErrors file, it _should_ only contain Type Conversion Failures on Size, Creation Time, Last Access Time, and Last Write Time.
This is okay.
It is safe to delete the _ImportErrors file now.
Open up your newly created table by highlighting it and clicking open.
Select the First record by clicking on the gray box on the left next to the word Filename:. Press Delete and confirm the deletion of the 1 record.
To Create More Tables within your Wininterrogate database:
Right Click on the Table you just created.
Click Copy.
Select a blank Area in the Tables Window and right Click and click paste.
Select Structure Only.
I have created two additional empty databases using these instructions called Snapshot 1 and Snapshot 2 for the following Query Example.
Query Example:v Select the Queries Tab.
Click New.
Select Design View. Click Ok.
Add Snapshot 1 and Snapshot 2
Click once on Complete Path: from the Snapshot 1 table and drag your mouse onto Complete Path: from the Snapshot 2 table.
Creating a relationship between these two tables.
Now you can use "Build" to create custom queries, I have included an example that sorts on the following criteria
If the complete path in Snapshot 1 is the same as the complete path in Snapshot 2 ( c:\path\filename = c:\path\filename) WE ARE COMPARING THE SAME FILE)
Next, we compare the 2 filesizes for different MD5 Hashes.
If they DO NOT Match, we display them.
Wininterrogate 0.1.4 and MS Excel
.csv files are by default associated with MS-Excel.
Wininterrogate automatically launches whatever application is associated with the .csv extension.