Sysinternals Suite

by Sysinternalsv2026-06-10

Last updated Jun 12, 2026

Sysinternals Suite is a bundle of the Sysinternals utilities including Process Explorer, Process Monitor, Sysmon, Autoruns, ProcDump, all of the PsTools, and many more.

Visit homepage

Install with winget

$ winget install --id Microsoft.Sysinternals.Suite --exact --version 2026-06-10

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

Sysinternals Suite is a bundle of the Sysinternals utilities including Process Explorer, Process Monitor, Sysmon, Autoruns, ProcDump, all of the PsTools, and many more.

The Sysinternals website was created in 1996 by Mark Russinovich to host his advanced system utilities and technical information. Whether you’re an IT pro or a developer, you’ll find Sysinternals utilities to help you manage, troubleshoot, and diagnose your Windows systems and applications.

The Sysinternals Troubleshooting Utilities have been rolled up into a single Suite of tools. This file contains the individual troubleshooting tools and help files. It does not contain non-troubleshooting tools like the BSOD Screen Saver.

The Suite is a bundling of the following selected Sysinternals Utilities: AccessChk, AccessEnum, AdExplorer, AdInsight, AdRestore, Autologon, Autoruns, BgInfo, BlueScreen, CacheSet, ClockRes, Contig, Coreinfo, Ctrl2Cap, DebugView, Desktops, Disk2vhd, DiskExt, DiskMon, DiskView, Disk Usage (DU), EFSDump, FindLinks, Handle, Hex2dec, Junction, LDMDump, ListDLLs, LiveKd, LoadOrder, LogonSessions, MoveFile, NotMyFault, NTFSInfo, PendMoves, PipeList, PortMon, ProcDump, Process Explorer, Process Monitor, PsExec, PsFile, PsGetSid, PsInfo, PsKill, PsList, PsLoggedOn, PsLogList, PsPasswd, PsPing, PsService, PsShutdown, PsSuspend, PsTools, RAMMap, RDCMan, RegDelNull, RegHide, RegJump, Registry Usage (RU), SDelete, ShareEnum, ShellRunas, Sigcheck, Streams, Strings, Sync, Sysmon, TCPView, VMMap, VolumeID, WhoIs, WinObj, ZoomIt

Installers · v2026-06-10

Architecture	Type	Scope	Download
x86	ZIP archive	-	Direct
x64	ZIP archive	-	Direct
arm64	ZIP archive	-	Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

1 known CVE via NVD

medium5.5Patched in wingetCVE-2023-29353affects before 2023.6Jun 13, 2023
Sysinternals Process Monitor for Windows Denial of Service Vulnerability
Patch Vendor advisory

Source: NVD, updated just now. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr.

Related apps

SDeleteSysinternals
Microsoft.Sysinternals.SDeletev2.06
Securely overwrite sensitive files and cleanse free space.
StringsSysinternals
Microsoft.Sysinternals.Stringsv2.54
Strings scans the file you pass it for UNICODE (or ASCII) strings of a default length of 3 or more UNICODE (or ASCII) characters.
Remote Desktop Connection ManagerSysinternals
Microsoft.Sysinternals.RDCManv3.12
RDCMan manages multiple remote desktop connections. It is useful for managing server labs where you need regular access to each machine such as automated checkin systems and data centers.
SysmonSysinternals
Microsoft.Sysinternals.Sysmonv15.20
System activity monitor
ZoomItSysinternals
Microsoft.Sysinternals.ZoomItv12.00
ZoomIt is a screen zoom, annotation, and recording tool for technical presentations that include application demonstrations.
VMMapSysinternals
Microsoft.Sysinternals.VMMapv3.40
A process virtual and physical memory analysis utility.

More from Sysinternals or browse sysinternals.

Frequently asked questions

How do I install Sysinternals Suite on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Microsoft.Sysinternals.Suite --exact --version 2026-06-10. winget downloads the installer from Sysinternals and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install Sysinternals Suite silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id Microsoft.Sysinternals.Suite --exact 2026-06-10 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

How do I uninstall Sysinternals Suite via winget?

Run: winget uninstall --id Microsoft.Sysinternals.Suite --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Sysinternals Suite's Apps & Features entry.

Is Sysinternals Suite free?

Sysinternals Suite is distributed under Proprietary. Refer to the publisher (https://learn.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite) for the full license terms - Wingetly itself does not charge for installation.

Does Sysinternals Suite work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Sysinternals Suite directly from the publisher.

How do I keep Sysinternals Suite up to date?

Run winget upgrade --id Microsoft.Sysinternals.Suite --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of Sysinternals Suite from microsoft/winget-pkgs.