Question Locked

How can we extract startup UWP applications information?

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am using C++ code base to develop a forensic tool. The requirement is to display all the startup applications. However, UWP apps which are enabled to run at startup, are not found in RegEdit at "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" or any other paths which have startup applications info.

If I have to write a code to extract Startup applications like Cortana,Skype,Spotify etc (UWP apps) from registry or windows folders, how do I do it? Is there any path where UWP startup applications are stored?

Note: I know that all the installed applications are stored in C:\Program Files\WindowsApps\ but out of them, how to recognize which are startup enabled?

3 replies

by bdssravz

Registry paths:

"HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"

"HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run"

"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"

"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"

"C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup"
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp"

The last two paths, I got it from AutoRuns.
Most of all the applications I installed are displayed in my tool except the UWP apps. These apps(Cortana,Spotify,Skype) are not available in any of these paths. I just need to recognize all the UWP apps which are startup enabled.

Please let me know if you need more info.

by rproffitt

You can add that area to your app to be searched.

This discussion is closed to new replies.