Sysinternals Suite is a comprehensive set of system applications created by Mark Russinovich. These tools are designed to help users solve problems with Windows efficiently. This collection includes some of the most famous and useful tools known to advanced and interested users alike.
Essential Tools in Sysinternals Suite

Process Explorer
Process Explorer is an advanced alternative to Task Manager, providing detailed and accurate information about running processes.
Process Monitor
Process Monitor delivers real-time information about the file system, logs, and running processes, helping users keep their systems in check.
AutoRuns
AutoRuns offers a detailed picture of the processes that start with Windows, enabling users to manage startup programs effectively.
PageDefrag
PageDefrag analyzes the degree of fragmentation of the page file and registry and performs necessary defragmentation to enhance system performance.
Additional Utilities in Sysinternals Suite
Sysinternals Suite contains many more programs, each serving a specific purpose:
- AccessChk: Access check tool.
- AccessEnum: Access enumeration tool.
- AdExplorer: Active Directory Explorer.
- AdRestore: Active Directory object restore tool.
- Autologon: Auto login configuration tool.
- BgInfo: Background info display tool.
- CacheSet: Cache management tool.
- ClockRes: Clock resolution tool.
- Contig: File defragmentation tool.
- Coreinfo: Core information tool.
- Ctrl2Cap: Control key remapping tool.
- DebugView: Debug message capture tool.
- Desktops: Virtual desktops tool.
- DiskExt: Disk extension tool.
- DiskMon: Disk activity monitoring tool.
- DiskView: Disk sector viewer.
- Disk Usage (DU): Disk usage analysis tool.
- EFSDump: Encrypted file system dump tool.
- FileMon: File monitoring tool.
- Handle: Handle viewer.
- Hex2dec: Hexadecimal to decimal converter.
- Junction: Junction point viewer.
- LDMDump: Logical disk manager dump tool.
- ListDLLs: DLL listing tool.
- LiveKd: Live kernel debugging tool.
- LoadOrder: Load order viewer.
- LogonSessions: Logon session viewer.
- NewSid: SID change tool.
- NTFSInfo: NTFS information tool.
- PendMoves: Pending move viewer.
- PortMon: Port monitoring tool.
- Process Explorer: Process information tool.
- Process Monitor: Real-time process monitor.
- ProcFeatures: Processor feature viewer.
- PsExec: Remote execution tool.
- PsFile: File viewing tool.
- PsGetSid: SID viewing tool.
- PsInfo: System information tool.
- PsKill: Process termination tool.
- PsList: Process listing tool.
- PsLoggedOn: Logged on user viewer.
- PsLogList: Event log listing tool.
- PsPasswd: Password reset tool.
- PsService: Service viewing tool.
- PsShutdown: Remote shutdown tool.
- PsSuspend: Process suspension tool.
- RegDelNull: Registry null value deletion tool.
- RegJump: Registry jump tool.
- RegMon: Registry monitoring tool.
- RootkitRevealer: Rootkit detection tool.
- SDelete: Secure delete tool.
- ShareEnum: Share enumeration tool.
- ShellRunas: Shell run-as tool.
- SigCheck: Signature checking tool.
- Streams: Alternate data stream viewer.
- Strings: String search tool.
- Sync: File synchronization tool.
- TCPView: TCP connection viewer.
- VolumeID: Volume ID modification tool.
- WhoIs: Domain information tool.
- WinObj: Windows object viewer.
- ZoomIt: Screen zooming tool.
Easy Usage
These programs do not require installation and can be directly launched and used. Just unpack them into a common folder, and you’re good to go!
License: Freeware.
Download
Sysinternals Suite 13.02.2025 (50.5 MB)