Made on
Tilda
We tested both versions on three systems:
Some sophisticated malware checks if it is running under emulation by measuring instruction execution latency (RDTSC/RDTSCP differences). If you run autoruns64.exe on ARM64, the emulation layer changes timing. Malware that detects emulation might hide its startup entries. autoruns64a.exe avoids this detection. autoruns 64 vs autoruns 64a
Paul Jackson 26. Feb 12, 2021, 3:23 AM. Hello, The Sysinternals Autoruns utility includes multiple executable files: autoruns.exe, Microsoft Learn Which autoruns executable to use? - Microsoft Q&A We tested both versions on three systems: Some
: The "a" in Autoruns 64a stands for "alternate" or could imply an advanced version. However, based on typical naming conventions and updates by Sysinternals, Autoruns 64a could refer to a specific update or variant of Autoruns 64. It's essential to note that without official documentation from Sysinternals on the "64a" designation, the assumption might lean towards it being an internal or minor version update rather than a major release. autoruns64a
When you download the Microsoft Sysinternals Autoruns package, you are presented with multiple executables to ensure the tool can run natively across all modern Windows environments:
: The command-line (CLI) version, useful for scripting or automated analysis. autorunsc64.exe : The 64-bit command-line version. autorunsc64a.exe : The ARM 64-bit command-line version. Pro Tip