The Sysinternals web site was created in 1996 by Mark Russinovich to host his advanced system utilities and technical information. Whether you're an IT Pro or a developer, you'll find Sysinternals utilities to help you manage, troubleshoot and diagnose your Windows systems and applications
Download via Windows Store directly on Windows machine.
Live hosted tools when you're on an assessment or download each tool below.
All tooling
Resources
- accesschk.exe1434 KB
- accesschk64.exe792 KB
- AccessEnum.exe258 KB
- ADExplorer.exe1231 KB
- ADExplorer64.exe647 KB
- ADInsight.exe4987 KB
- ADInsight64.exe1731 KB
- adrestore.exe342 KB
- adrestore64.exe441 KB
- Autologon.exe334 KB
- Autologon64.exe431 KB
- Autoruns.exe1768 KB
- Autoruns64.exe1887 KB
- autorunsc.exe1287 KB
- autorunsc64.exe1426 KB
- Bginfo.exe2147 KB
- Bginfo64.exe2709 KB
- Cacheset.exe415 KB
- Cacheset64.exe545 KB
- Clockres.exe331 KB
- Clockres64.exe430 KB
- Contig.exe232 KB
- Contig64.exe279 KB
- Coreinfo.exe945 KB
- Coreinfo64.exe506 KB
- CoreinfoEx.exe2370 KB
- CoreinfoEx64.exe993 KB
- ctrl2cap.exe250 KB
- Dbgview.exe667 KB
- dbgview64.exe744 KB
- dbgviewcli.exe434 KB
- dbgviewcli64.exe478 KB
- Desktops.exe181 KB
- Desktops64.exe213 KB
- disk2vhd.exe1367 KB
- disk2vhd64.exe1409 KB
- diskext.exe333 KB
- diskext64.exe433 KB
- Diskmon.exe482 KB
- Diskmon64.exe620 KB
- DiskView.exe899 KB
- DiskView64.exe504 KB
- du.exe352 KB
- du64.exe455 KB
- efsdump.exe353 KB
- FindLinks.exe167 KB
- FindLinks64.exe190 KB
- handle.exe744 KB
- handle64.exe407 KB
- hex2dec.exe385 KB
- hex2dec64.exe508 KB
- junction.exe339 KB
- junction64.exe438 KB
- ldmdump.exe151 KB
- Listdlls.exe415 KB
- Listdlls64.exe216 KB
- livekd.exe642 KB
- livekd64.exe385 KB
- LoadOrd.exe367 KB
- LoadOrd64.exe473 KB
- LoadOrdC.exe364 KB
- LoadOrdC64.exe470 KB
- logonsessions.exe445 KB
- logonsessions64.exe550 KB
- movefile.exe331 KB
- movefile64.exe430 KB
- notmyfault.exe627 KB
- notmyfault64.exe767 KB
- notmyfaultc.exe464 KB
- notmyfaultc64.exe586 KB
- ntfsinfo.exe137 KB
- ntfsinfo64.exe156 KB
- pendmoves.exe333 KB
- pendmoves64.exe431 KB
- pipelist.exe172 KB
- pipelist64.exe213 KB
- portmon.exe441 KB
- procdump.exe1339 KB
- procdump64.exe724 KB
- procexp.exe4512 KB
- procexp64.exe2364 KB
- Procmon.exe4158 KB
- Procmon64.exe2185 KB
- PsExec.exe700 KB
- PsExec64.exe814 KB
- psfile.exe230 KB
- psfile64.exe283 KB
- PsGetsid.exe375 KB
- PsGetsid64.exe458 KB
- PsInfo.exe404 KB
- PsInfo64.exe488 KB
- pskill.exe369 KB
- pskill64.exe448 KB
- pslist.exe213 KB
- pslist64.exe261 KB
- PsLoggedon.exe149 KB
- PsLoggedon64.exe167 KB
- psloglist.exe306 KB
- psloglist64.exe370 KB
- pspasswd.exe217 KB
- pspasswd64.exe265 KB
- psping.exe287 KB
- psping64.exe345 KB
- PsService.exe262 KB
- PsService64.exe315 KB
- psshutdown.exe640 KB
- psshutdown64.exe742 KB
- pssuspend.exe356 KB
- pssuspend64.exe434 KB
- RAMMap.exe727 KB
- RAMMap64.exe389 KB
- RegDelNull.exe343 KB
- RegDelNull64.exe444 KB
- Reghide.exe143 KB
- regjump.exe358 KB
- RootkitRevealer.exe327 KB
- ru.exe341 KB
- ru64.exe440 KB
- sdelete.exe208 KB
- sdelete64.exe252 KB
- ShareEnum.exe486 KB
- ShareEnum64.exe629 KB
- ShellRunas.exe171 KB
- sigcheck.exe428 KB
- sigcheck64.exe515 KB
- streams.exe335 KB
- streams64.exe434 KB
- strings.exe362 KB
- strings64.exe467 KB
- sync.exe336 KB
- sync64.exe435 KB
- Sysmon.exe6018 KB
- Sysmon64.exe3129 KB
- tcpvcon.exe198 KB
- tcpvcon64.exe245 KB
- tcpview.exe923 KB
- tcpview64.exe1062 KB
- Testlimit.exe227 KB
- Testlimit64.exe239 KB
- vmmap.exe5072 KB
- vmmap64.exe2694 KB
- Volumeid.exe229 KB
- Volumeid64.exe166 KB
- whois.exe390 KB
- whois64.exe512 KB
- Winobj.exe1410 KB
- Winobj64.exe1740 KB
- ZoomIt.exe15936 KB
- ZoomIt64.exe8116 KB
ARM64 tooling
ARM64 Resources
- accesschk64a.exe852 KB
- ADExplorer64a.exe703 KB
- ADInsight64a.exe1775 KB
- adrestore64a.exe521 KB
- Autologon64a.exe513 KB
- Autoruns64a.exe2028 KB
- autorunsc64a.exe1460 KB
- Clockres64a.exe508 KB
- Contig64a.exe263 KB
- Coreinfo64a.exe487 KB
- CoreinfoEx64a.exe1042 KB
- Dbgview64a.exe748 KB
- dbgviewcli64a.exe474 KB
- disk2vhd64a.exe1416 KB
- diskext64a.exe510 KB
- DiskView64a.exe588 KB
- du64a.exe537 KB
- FindLinks64a.exe192 KB
- handle64a.exe359 KB
- hex2dec64a.exe597 KB
- junction64a.exe516 KB
- LoadOrd64a.exe520 KB
- LoadOrdC64a.exe517 KB
- logonsessions64a.exe633 KB
- movefile64a.exe508 KB
- notmyfault64a.exe771 KB
- notmyfaultc64a.exe574 KB
- pendmoves64a.exe509 KB
- pipelist64a.exe201 KB
- procdump64a.exe730 KB
- procexp64a.exe2406 KB
- Procmon64a.exe2252 KB
- PsExec64a.exe764 KB
- psfile64a.exe246 KB
- PsGetsid64a.exe434 KB
- PsInfo64a.exe466 KB
- pskill64a.exe426 KB
- pslist64a.exe248 KB
- psloglist64a.exe336 KB
- pspasswd64a.exe230 KB
- psping64a.exe348 KB
- PsService64a.exe280 KB
- pssuspend64a.exe411 KB
- RAMMap64a.exe406 KB
- RegDelNull64a.exe524 KB
- ru64a.exe519 KB
- sdelete64a.exe232 KB
- sigcheck64a.exe516 KB
- streams64a.exe512 KB
- strings64a.exe514 KB
- sync64a.exe514 KB
- Sysmon64a.exe3066 KB
- tcpvcon64a.exe232 KB
- tcpview64a.exe1020 KB
- vmmap64a.exe1495 KB
- whois64a.exe601 KB
- Winobj64a.exe1838 KB
- ZoomIt64a.exe8044 KB