voidregreso / DumpUWPAppPkg

anzu

Dumps installed Universal Windows App package contents, notably those that are encrypted, with some simple JavaScript.

Powered by Frida.

Installation and usage

1. npm install @withinrafael/anzu -g
2. icacls .\path\to\dest\folder /grant "ALL APPLICATION PACKAGES":(OI)(CI)F
3. anzu running-uwp-process.exe .\path\to\dest\folder
4. Wait.
5. You're done, congratulations.

Supported operating systems

• Windows 10

Known issues

• anzu will not dump apps that are installed outside %ProgramFiles%\WindowsApps (#1)
• anzu currently requires manual DACL alteration (see install instructions)