Dumps installed Universal Windows App package contents, notably those that are encrypted, with some simple JavaScript.
Powered by Frida.
npm install @withinrafael/anzu -g
icacls .\path\to\dest\folder /grant "ALL APPLICATION PACKAGES":(OI)(CI)F
anzu running-uwp-process.exe .\path\to\dest\folder
- Wait.
- You're done, congratulations.
- Windows 10
- anzu will not dump apps that are installed outside %ProgramFiles%\WindowsApps (#1)
- anzu currently requires manual DACL alteration (see install instructions)