Sysinternals

The Sysinternals web site was created in 1996 by Mark Russinovich to host his advanced system utilities and technical information. Whether you’re an IT Pro or a developer, you’ll find Sysinternals utilities to help you manage, troubleshoot and diagnose your Windows systems and applications

Download via Windows Store directly on Windows machine.

Live hosted tools when you’re on an assessment or download each tool below.

All tooling

  • ADExplorer.exe (1208 kb)
  • ADExplorer64.exe (645 kb)
  • ADInsight.exe (4986 kb)
  • ADInsight64.exe (1730 kb)
  • AccessEnum.exe (478 kb)
  • Autologon.exe (333 kb)
  • Autologon64.exe (430 kb)
  • Autoruns.exe (2443 kb)
  • Autoruns64.exe (2859 kb)
  • Bginfo.exe (3274 kb)
  • Bginfo64.exe (4493 kb)
  • Cacheset.exe (414 kb)
  • Cacheset64.exe (544 kb)
  • Clockres.exe (330 kb)
  • Clockres64.exe (429 kb)
  • Contig.exe (438 kb)
  • Contig64.exe (567 kb)
  • Coreinfo.exe (1017 kb)
  • Coreinfo64.exe (523 kb)
  • Dbgview.exe (866 kb)
  • Desktops.exe (180 kb)
  • Desktops64.exe (212 kb)
  • DiskView.exe (898 kb)
  • DiskView64.exe (503 kb)
  • Diskmon.exe (481 kb)
  • Diskmon64.exe (619 kb)
  • FindLinks.exe (166 kb)
  • FindLinks64.exe (189 kb)
  • Listdlls.exe (414 kb)
  • Listdlls64.exe (215 kb)
  • LoadOrd.exe (366 kb)
  • LoadOrd64.exe (472 kb)
  • LoadOrdC.exe (363 kb)
  • LoadOrdC64.exe (469 kb)
  • Procmon.exe (5090 kb)
  • Procmon64.exe (2630 kb)
  • PsExec.exe (815 kb)
  • PsExec64.exe (1053 kb)
  • PsGetsid.exe (290 kb)
  • PsGetsid64.exe (322 kb)
  • PsInfo.exe (306 kb)
  • PsInfo64.exe (343 kb)
  • PsLoggedon.exe (148 kb)
  • PsLoggedon64.exe (166 kb)
  • PsService.exe (184 kb)
  • PsService64.exe (205 kb)
  • RAMMap.exe (656 kb)
  • RDCMan.exe (1852 kb)
  • RegDelNull.exe (342 kb)
  • RegDelNull64.exe (443 kb)
  • Reghide.exe (142 kb)
  • RootkitRevealer.exe (326 kb)
  • ShareEnum.exe (485 kb)
  • ShareEnum64.exe (628 kb)
  • ShellRunas.exe (170 kb)
  • Sysmon.exe (7118 kb)
  • Sysmon64.exe (3833 kb)
  • Tcpvcon.exe (190 kb)
  • Testlimit.exe (226 kb)
  • Testlimit64.exe (238 kb)
  • Volumeid.exe (228 kb)
  • Volumeid64.exe (165 kb)
  • Winobj.exe (1409 kb)
  • Winobj64.exe (1739 kb)
  • ZoomIt.exe (1103 kb)
  • ZoomIt64.exe (612 kb)
  • accesschk.exe (1346 kb)
  • accesschk64.exe (741 kb)
  • adrestore.exe (341 kb)
  • adrestore64.exe (440 kb)
  • autorunsc.exe (695 kb)
  • autorunsc64.exe (769 kb)
  • ctrl2cap.exe (146 kb)
  • dbgview64.exe (1077 kb)
  • disk2vhd.exe (1366 kb)
  • disk2vhd64.exe (1408 kb)
  • diskext.exe (332 kb)
  • diskext64.exe (432 kb)
  • du.exe (351 kb)
  • du64.exe (454 kb)
  • efsdump.exe (352 kb)
  • handle.exe (992 kb)
  • handle64.exe (577 kb)
  • hex2dec.exe (384 kb)
  • hex2dec64.exe (507 kb)
  • junction.exe (338 kb)
  • junction64.exe (437 kb)
  • ldmdump.exe (150 kb)
  • livekd.exe (1016 kb)
  • livekd64.exe (603 kb)
  • logonsessions.exe (444 kb)
  • logonsessions64.exe (549 kb)
  • movefile.exe (330 kb)
  • movefile64.exe (429 kb)
  • notmyfault.exe (504 kb)
  • notmyfault64.exe (636 kb)
  • notmyfaultc.exe (502 kb)
  • notmyfaultc64.exe (634 kb)
  • ntfsinfo.exe (136 kb)
  • ntfsinfo64.exe (155 kb)
  • pagedfrg.exe (210 kb)
  • pendmoves.exe (332 kb)
  • pendmoves64.exe (430 kb)
  • pipelist.exe (331 kb)
  • pipelist64.exe (431 kb)
  • portmon.exe (440 kb)
  • procdump.exe (735 kb)
  • procdump64.exe (391 kb)
  • procexp.exe (2772 kb)
  • procexp64.exe (1474 kb)
  • psfile.exe (146 kb)
  • psfile64.exe (164 kb)
  • pskill.exe (277 kb)
  • pskill64.exe (311 kb)
  • pslist.exe (174 kb)
  • pslist64.exe (197 kb)
  • psloglist.exe (434 kb)
  • psloglist64.exe (565 kb)
  • pspasswd.exe (146 kb)
  • pspasswd64.exe (164 kb)
  • psping.exe (249 kb)
  • psping64.exe (286 kb)
  • psshutdown.exe (842 kb)
  • psshutdown64.exe (1093 kb)
  • pssuspend.exe (282 kb)
  • pssuspend64.exe (314 kb)
  • regjump.exe (357 kb)
  • ru.exe (340 kb)
  • ru64.exe (439 kb)
  • sdelete.exe (350 kb)
  • sdelete64.exe (448 kb)
  • sigcheck.exe (832 kb)
  • sigcheck64.exe (1139 kb)
  • streams.exe (334 kb)
  • streams64.exe (433 kb)
  • strings.exe (361 kb)
  • strings64.exe (466 kb)
  • sync.exe (335 kb)
  • sync64.exe (434 kb)
  • tcpvcon64.exe (227 kb)
  • tcpview.exe (1376 kb)
  • tcpview64.exe (1711 kb)
  • vmmap.exe (1286 kb)
  • vmmap64.exe (701 kb)
  • whois.exe (389 kb)
  • whois64.exe (511 kb)

    • URL List