It has full access to the 64-bit areas of the Windows Registry and system files, which is critical for identifying malware that hides in 64-bit specific "Auto-start Extensibility Points" (ASEPs).
While ARM-based Windows devices can often emulate x86 or x64 software, running the native ARM version is more efficient and ensures the tool correctly reads architecture-specific startup locations. autoruns 64 vs autoruns 64a
Because it is compiled specifically for 64-bit Intel/AMD systems, it runs natively without needing any emulation. It has full access to the 64-bit areas
When you download the Sysinternals Autoruns package, you’ll notice several different executable files. Choosing between and Autoruns64a.exe depends entirely on your computer's processor architecture. Quick Comparison: Which One Should You Run? Executable Architecture Autoruns64.exe x64 (AMD64/Intel 64) Most modern desktop and laptop PCs. Autoruns64a.exe ARM64 Executable Architecture Autoruns64
You would use this on hardware like the Surface Pro 9 (5G), Lenovo ThinkPad X13s, or other laptops featuring Qualcomm Snapdragon processors.
Devices with ARM processors, like the Microsoft Surface Pro (ARM) or certain tablets.