Autoruns 64 Vs Autoruns 64a
Autoruns64
The primary difference between and Autoruns64a is the processor architecture they are designed to run on . Both are part of the Microsoft Sysinternals Autoruns suite, which helps identify programs configured to run automatically during system boot or login. Quick Comparison Table Intended Architecture autoruns64.exe x64 (64-bit Intel/AMD) Standard desktops and laptops with 64-bit Windows. autoruns64a.exe ARM64
- Autoruns scans deep into the registry, file system, and Windows internals.
- A native ARM64 version is faster and more reliable than running the x64 version under emulation on ARM hardware.
Which one should you use?
-
AMD64
autoruns64.exe is compiled for the instruction set (standard Intel/AMD 64-bit CPUs). Run this on an ARM64 Windows device, and it will work—albeit under emulation (which can be slow, memory-intensive, and potentially miss some low-level ARM-specific startup artifacts). autoruns 64 vs autoruns 64a
Paul Jackson 26. Feb 12, 2021, 3:23 AM. Hello, The Sysinternals Autoruns utility includes multiple executable files: autoruns.exe, Microsoft Learn Which autoruns executable to use? - Microsoft Q&A Autoruns64 The primary difference between and Autoruns64a is
For forensic analysis of an ARM64 disk image offline:
You cannot run ARM64 binaries on an x64 forensic workstation. Instead, use autoruns64.exe (x64) against the mounted offline registry hives by pointing Autoruns to the C:\Windows\System32\config folder of the image. Architecture emulation does not matter here. Autoruns scans deep into the registry, file system,
