Autoruns 64 Vs Autoruns 64a [work] Instant
Autoruns is a popular utility developed by Sysinternals, a renowned company in the field of Windows system utilities. It is used to monitor and manage the auto-start locations in Windows, allowing users to control what programs and services start automatically when the system boots up. The utility comes in various versions, including 32-bit and 64-bit editions, to support different Windows architectures. This report focuses on comparing two specific versions: Autoruns 64 and Autoruns 64a.
For decades, Windows system administrators, forensic analysts, and power users have relied on as the ultimate utility for managing startup processes. Unlike the simplistic MSConfig or the rudimentary Task Manager Startup tab, Autoruns delves deep into the shadowy corners of the Windows Registry, scheduled tasks, services, drivers, and dozens of Auto-start Extensibility Points (ASEPs).
For a standard Windows 10 or 11 installation on an Intel or AMD processor, you should use . If you happen to run the basic autoruns.exe (the 32-bit version) on a 64-bit system, it is designed to detect the architecture and automatically launch the 64-bit version for you.
Before diving into the differences between Autoruns 64 and Autoruns 64a, let's briefly overview what Autoruns does. Autoruns is an advanced utility that shows a comprehensive list of all applications that are configured to run at system boot or login. It scans the registry and file system for entries that could potentially be executed automatically, presenting them in an organized manner. This allows users to easily enable, disable, or delete entries to manage startup programs. autoruns 64 vs autoruns 64a
Locate the field under the Device Specifications header. Look for your designator: If it reads "x64-based processor" , use autoruns64.exe . If it reads "ARM-based processor" , use autoruns64a.exe .
While both Autoruns 64 and Autoruns 64a are powerful tools for managing startup applications on 64-bit Windows systems, they cater to slightly different needs. The choice between the two versions should be based on the specific requirements of the task at hand. For general use, Autoruns 64 is a robust option. For more detailed analysis, particularly with regards to executable path handling, Autoruns 64a provides an alternate and sometimes preferable approach.
: The command-line (CLI) version, useful for scripting or automated analysis. autorunsc64.exe : The 64-bit command-line version. autorunsc64a.exe : The ARM 64-bit command-line version. Pro Tip Autoruns is a popular utility developed by Sysinternals,
: Autoruns 64a provides more accurate results in cases where executable paths are specified without a full path, or where the executable's directory isn't in the PATH variable. This can make a significant difference in accurately capturing and representing startup entries on systems with complex path configurations.
For tips on how to use Autoruns to speed up your PC and manage startup items: Speed Up Your PC with Sysinternals Autoruns MikeTheTech YouTube• Jul 27, 2024 How to Use Autoruns to Detect and Remove Malware on Windows
While the standard 32-bit and 64-bit versions are self-explanatory, the distinction between and Autoruns64a.exe often confuses IT professionals and system administrators. Here is a definitive breakdown of what these two files are, how they differ, and which one you should use. The Core Distinction: Processor Architecture This report focuses on comparing two specific versions:
The existence of multiple executables is not due to redundancy but rather a matter of processor architecture support. Windows runs on different types of processors, and an executable compiled for one type generally cannot run natively on another. The main architectures are:
Performance
Microsoft has implemented a clever in recent versions (post v14.0). The 32-bit executable detects the OS architecture and can spawn the appropriate 64-bit child process. However, this stub only works for x86 → x64, not for x64 → ARM64.