Question

  • Creator
    Topic
  • #2141646

    How can we extract startup UWP applications information?

    by bdssravz ·

    Tags: 

    I am using C++ code base to develop a forensic tool. The requirement is to display all the startup applications. However, UWP apps which are enabled to run at startup, are not found in RegEdit at “HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run” or any other paths which have startup applications info.

    If I have to write a code to extract Startup applications like Cortana,Skype,Spotify etc (UWP apps) from registry or windows folders, how do I do it? Is there any path where UWP startup applications are stored?

    Note: I know that all the installed applications are stored in C:\Program Files\WindowsApps\ but out of them, how to recognize which are startup enabled?

You are posting a reply to: How can we extract startup UWP applications information?

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our Community FAQs for details. All submitted content is subject to our Terms of Use.

All Answers

  • Author
    Replies
    • #2415323

      The problem is

      by rproffitt ·

      In reply to How can we extract startup UWP applications information?

      That this has prior discussions so I can’t tell where you are in your research.

      Frankly, what tools do you use now?

      https://www.google.com/search?q=windows+10+list+all+startup+programs+site:superuser.com finds these priors and I can’t tell where you are today.

      This is not an offer to write the code for you. Tell me where you are now.

      • #2415322

        So far I have extracted Startup applications from the following paths:

        by bdssravz ·

        In reply to The problem is

        Registry paths:

        “HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run”

        “HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run”

        “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run”

        “HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run”

        “C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup”
        “C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp”

        The last two paths, I got it from AutoRuns.
        Most of all the applications I installed are displayed in my tool except the UWP apps. These apps(Cortana,Spotify,Skype) are not available in any of these paths. I just need to recognize all the UWP apps which are startup enabled.

        Please let me know if you need more info.

Viewing 0 reply threads