usosvc.dll
v10.0.19041.5848
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 12
GetDefaultConfiguration
#1 · 0x319b0
GetNextAcceptableTime
#2 · 0x30a10
GetNextAcceptableTimeEx
#3 · 0x30ad0
GetSmartActiveHours
#4 · 0x31020
GetSmartActiveHoursEx
#5 · 0x310d0
GetSmartBusyCheckVelocityFeature
#6 · 0x34ea0
GetTimeIntervalConfidence
#7 · 0x31630
GetUserActivityPredictionEx
#8 · 0x35790
ServiceMain
#9 · 0x198f0
SvchostPushServiceGlobals
#10 · 0x19180
DllCanUnloadNow
#11 · 0x8050
DllGetClassObject
#12 · 0x8070
No function matches your filter.
Imported DLLs & functions 333
ApiSetQueryApiSetPresence
0x180069f08
CoCreateFreeThreadedMarshaler
0x180069f50
CoCreateGuid
0x180069f30
CoCreateInstance
0x180069f18
CoDisconnectContext
0x180069f40
CoDisconnectObject
0x180069f68
CoImpersonateClient
0x180069f38
CoInitializeEx
0x180069f28
CoRegisterClassObject
0x180069f20
CoRevertToSelf
0x180069f48
CoRevokeClassObject
0x180069f70
CoTaskMemAlloc
0x180069f78
CoTaskMemFree
0x180069f60
CoTaskMemRealloc
0x180069f88
CoUninitialize
0x180069f80
CoWaitForMultipleHandles
0x180069f58
DebugBreak
0x180069f98
IsDebuggerPresent
0x180069fa0
OutputDebugStringW
0x180069fa8
DelayLoadFailureHook
0x180069fb8
ResolveDelayLoadedAPI
0x180069fc8
GetLastError
0x180069ff8
RaiseException
0x180069fe8
SetLastError
0x180069ff0
SetUnhandledExceptionFilter
0x180069fd8
UnhandledExceptionFilter
0x180069fe0
CompareFileTime
0x18006a040
CreateDirectoryW
0x18006a038
CreateFileW
0x18006a008
DeleteFileW
0x18006a030
FindClose
0x18006a018
FindFirstFileW
0x18006a028
FindNextFileW
0x18006a020
GetFileAttributesExW
0x18006a048
GetFileAttributesW
0x18006a010
GetProcessHeap
0x18006a078
HeapAlloc
0x18006a080
HeapFree
0x18006a070
InitializeSListHead
0x18006a0a8
UnregisterWait
0x18006a0b8
PowerClearRequest
0x18006a0e0
PowerCreateRequest
0x18006a0d0
PowerSetRequest
0x18006a0d8
VerifyVersionInfoW
0x18006a0c8
DisableThreadLibraryCalls
0x18006a130
FindResourceExW
0x18006a0f0
FreeLibrary
0x18006a128
GetModuleFileNameA
0x18006a0f8
GetModuleFileNameW
0x18006a120
GetModuleHandleExW
0x18006a108
GetModuleHandleW
0x18006a138
GetProcAddress
0x18006a100
LoadLibraryExW
0x18006a140
LoadResource
0x18006a118
SizeofResource
0x18006a110
LoadLibraryW
0x18006a150
FormatMessageW
0x18006a160
PathAllocCanonicalize
0x18006a170
PathCchAppend
0x18006a178
PathCchCanonicalize
0x18006a180
PathCchRemoveBackslash
0x18006a188
PathCchSkipRoot
0x18006a190
ExpandEnvironmentStringsW
0x18006a1a0
CreateProcessAsUserW
0x18006a1d8
CreateProcessW
0x18006a1c0
CreateThread
0x18006a1b8
GetCurrentProcess
0x18006a1e8
GetCurrentProcessId
0x18006a1b0
GetCurrentThreadId
0x18006a1c8
GetExitCodeProcess
0x18006a1e0
GetExitCodeThread
0x18006a1f8
OpenProcessToken
0x18006a1f0
TerminateProcess
0x18006a1d0
IsProcessorFeaturePresent
0x18006a210
OpenProcess
0x18006a208
QueryPerformanceCounter
0x18006a220
QueryFullProcessImageNameW
0x18006a230
RegCloseKey
0x18006a250
RegCreateKeyExW
0x18006a260
RegDeleteTreeW
0x18006a278
RegDeleteValueW
0x18006a258
RegEnumKeyExW
0x18006a280
RegGetValueW
0x18006a268
RegOpenKeyExW
0x18006a270
RegQueryInfoKeyW
0x18006a288
RegQueryValueExW
0x18006a240
RegSetKeySecurity
0x18006a248
RegSetValueExW
0x18006a290
RegSetKeyValueW
0x18006a2a0
RtlCaptureContext
0x18006a2c0
RtlLookupFunctionEntry
0x18006a2b0
RtlVirtualUnwind
0x18006a2b8
PathFileExistsW
0x18006a2d0
PathFindFileNameW
0x18006a2d8
InitiateShutdownW
0x18006a2e8
CharNextW
0x18006a310
lstrcmpiW
0x18006a320
AcquireSRWLockExclusive
0x18006a3a8
AcquireSRWLockShared
0x18006a398
CreateEventExW
0x18006a360
CreateEventW
0x18006a3e8
CreateMutexExW
0x18006a348
CreateMutexW
0x18006a330
CreateSemaphoreExW
0x18006a3d0
DeleteCriticalSection
0x18006a388
EnterCriticalSection
0x18006a3c8
InitializeCriticalSection
0x18006a350
InitializeCriticalSectionAndSpinCount
0x18006a368
InitializeCriticalSectionEx
0x18006a380
LeaveCriticalSection
0x18006a3c0
OpenEventW
0x18006a3b0
OpenSemaphoreW
0x18006a340
ReleaseMutex
0x18006a3e0
ReleaseSemaphore
0x18006a3b8
ReleaseSRWLockExclusive
0x18006a3a0
ReleaseSRWLockShared
0x18006a390
ResetEvent
0x18006a378
SetEvent
0x18006a370
WaitForMultipleObjectsEx
0x18006a358
WaitForSingleObject
0x18006a3d8
WaitForSingleObjectEx
0x18006a338
InitOnceBeginInitialize
0x18006a408
InitOnceComplete
0x18006a400
Sleep
0x18006a3f8
WaitForMultipleObjects
0x18006a418
GetLocalTime
0x18006a448
GetSystemDirectoryW
0x18006a440
GetSystemTime
0x18006a438
GetSystemTimeAsFileTime
0x18006a428
GetTickCount
0x18006a430
GetTickCount64
0x18006a450
VerSetConditionMask
0x18006a460
CloseThreadpool
0x18006a478
CloseThreadpoolTimer
0x18006a4a8
CreateThreadpool
0x18006a480
CreateThreadpoolTimer
0x18006a498
DisassociateCurrentThreadFromCallback
0x18006a470
SetThreadpoolThreadMaximum
0x18006a488
SetThreadpoolThreadMinimum
0x18006a4b0
SetThreadpoolTimer
0x18006a490
WaitForThreadpoolTimerCallbacks
0x18006a4a0
FileTimeToSystemTime
0x18006a4c0
SystemTimeToFileTime
0x18006a4c8
TzSpecificLocalTimeToSystemTime
0x18006a4d0
GetRestrictedErrorInfo
0x18006a4e0
SetRestrictedErrorInfo
0x18006a4e8
RoOriginateLanguageException
0x18006a4f8
RoActivateInstance
0x18006a508
RoGetActivationFactory
0x18006a510
WindowsCreateString
0x18006a530
WindowsCreateStringReference
0x18006a528
WindowsDeleteString
0x18006a538
WindowsGetStringRawBuffer
0x18006a520
__C_specific_handler
0x18006a670
__CxxFrameHandler3
0x18006a5e8
__CxxFrameHandler4
0x18006a680
__std_terminate
0x18006a678
_CxxThrowException
0x18006a5f0
_o___std_exception_copy
0x18006a668
_o___std_exception_destroy
0x18006a660
_o___std_type_info_destroy_list
0x18006a658
_o___stdio_common_vsnprintf_s
0x18006a650
_o___stdio_common_vsprintf_s
0x18006a648
_o___stdio_common_vswprintf
0x18006a640
_o___stdio_common_vswscanf
0x18006a638
_o__beginthreadex
0x18006a630
_o__callnewh
0x18006a620
_o__cexit
0x18006a618
_o__configure_narrow_argv
0x18006a610
_o__crt_atexit
0x18006a608
_o__errno
0x18006a600
_o__execute_onexit_table
0x18006a5f8
_o__initialize_narrow_environment
0x18006a5a0
_o__initialize_onexit_table
0x18006a628
_o__invalid_parameter_noinfo
0x18006a548
_o__invalid_parameter_noinfo_noreturn
0x18006a550
_o__purecall
0x18006a558
_o__recalloc
0x18006a560
_o__register_onexit_function
0x18006a568
_o__seh_filter_dll
0x18006a570
_o__set_errno
0x18006a578
_o__wcsicmp
0x18006a580
_o__wcsnicmp
0x18006a588
_o__wtoi
0x18006a590
_o__wtol
0x18006a598
_o_free
0x18006a5a8
_o_iswspace
0x18006a5b0
_o_malloc
0x18006a5b8
_o_strncpy_s
0x18006a5c0
_o_strtol
0x18006a5c8
_o_terminate
0x18006a5d0
_o_towlower
0x18006a5d8
_o_wcsncpy_s
0x18006a5e0
memcmp
0x18006a6a0
memcpy
0x18006a698
memmove
0x18006a6a8
strchr
0x18006a688
strrchr
0x18006a690
ControlTraceW
0x18006a6f8
EnableTraceEx2
0x18006a6e8
StartTraceW
0x18006a6f0
QueryTraceW
0x18006a708
EventActivityIdControl
0x18006a718
EventRegister
0x18006a738
EventSetInformation
0x18006a730
EventUnregister
0x18006a720
EventWriteTransfer
0x18006a728
RegisterWaitUntilOOBECompleted
0x18006a748
UnregisterWaitUntilOOBECompleted
0x18006a750
CallNtPowerInformation
0x18006a760
PowerRegisterSuspendResumeNotification
0x18006a770
PowerUnregisterSuspendResumeNotification
0x18006a768
PowerSettingRegisterNotification
0x18006a788
PowerSettingUnregisterNotification
0x18006a780
AdjustTokenPrivileges
0x18006a7a8
AllocateAndInitializeSid
0x18006a7a0
CheckTokenMembership
0x18006a7c0
DuplicateTokenEx
0x18006a798
FreeSid
0x18006a7b0
GetTokenInformation
0x18006a7c8
PrivilegeCheck
0x18006a7b8
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x18006a7d8
RegisterServiceCtrlHandlerExW
0x18006a7f0
SetServiceStatus
0x18006a7e8
CloseServiceHandle
0x18006a800
OpenSCManagerW
0x18006a808
OpenServiceW
0x18006a810
I_QueryTagInformation
0x18006a820
GetPersistedRegistryLocationW
0x18006a830
CertVerifyCertificateChainPolicy
0x180069e10
_Cnd_broadcast
0x18006a9c8
_Cnd_destroy_in_situ
0x18006a9c0
_Cnd_do_broadcast_at_thread_exit
0x18006a9a8
_Cnd_init_in_situ
0x18006a9b8
_Cnd_wait
0x18006a9d8
_Mtx_destroy_in_situ
0x18006a880
_Mtx_init_in_situ
0x18006a878
_Mtx_lock
0x18006a870
_Mtx_unlock
0x18006a890
_Thrd_detach
0x18006a9a0
_Xtime_get_ticks
0x18006a8b8
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
0x18006a958
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
0x18006a940
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
0x18006a8f8
?_Throw_C_error@std@@YAXH@Z
0x18006a868
?_Throw_Cpp_error@std@@YAXH@Z
0x18006a9b0
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
0x18006a960
?_Xbad_alloc@std@@YAXXZ
0x18006a9e0
?_Xlength_error@std@@YAXPEBD@Z
0x18006a898
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
0x18006a928
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
0x18006a930
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
0x18006a8c0
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x18006a900
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x18006a938
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x18006a8c8
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
0x18006a948
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
0x18006a920
?flags@ios_base@std@@QEBAHXZ
0x18006a8a0
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
0x18006a950
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
0x18006a8f0
?good@ios_base@std@@QEBA_NXZ
0x18006a888
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
0x18006a8e0
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
0x18006a968
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
0x18006a8e8
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
0x18006a918
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
0x18006a970
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
0x18006a908
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
0x18006a978
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
0x18006a8d0
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
0x18006a8d8
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
0x18006a980
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
0x18006a910
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
0x18006a988
?uncaught_exception@std@@YA_NXZ
0x18006a9d0
?width@ios_base@std@@QEAA_J_J@Z
0x18006a8b0
?width@ios_base@std@@QEBA_JXZ
0x18006a8a8
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
0x18006a990
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
0x18006a998
ntdll.dll
15
DbgPrintEx
0x18006a9f0
LdrAddRefDll
0x18006aa58
LdrUnloadDll
0x18006aa50
NtIsSystemResumeAutomatic
0x18006aa40
NtPowerInformation
0x18006aa48
NtQueryWnfStateData
0x18006aa30
RtlAllocateHeap
0x18006aa10
RtlFreeHeap
0x18006aa08
RtlNtStatusToDosError
0x18006aa60
RtlPublishWnfStateData
0x18006aa20
RtlRaiseStatus
0x18006a9f8
RtlRandomEx
0x18006aa18
RtlReAllocateHeap
0x18006aa00
RtlSubscribeWnfStateChangeNotification
0x18006aa38
RtlUnsubscribeWnfNotificationWaitForCompletion
0x18006aa28
OLEAUT32.dll
10
SysAllocString
0x180069e28
SysFreeString
0x180069e30
SysStringLen
0x180069e20
VarBstrCmp
0x180069e50
VariantChangeType
0x180069e60
VariantClear
0x180069e48
VariantCopy
0x180069e58
VariantInit
0x180069e38
VariantTimeToSystemTime
0x180069e40
VarUI4FromStr
0x180069e68
0x18006aa70
I_RpcBindingInqLocalClientPID
0x180069ea0
NdrClientCall3
0x180069e98
RpcBindingFree
0x180069e90
RpcBindingFromStringBindingW
0x180069eb0
RpcBindingSetAuthInfoExW
0x180069e80
RpcStringBindingComposeW
0x180069e78
RpcStringFreeW
0x180069e88
UuidCreate
0x180069ea8
PdcTaskClientRegister
0x180069ec8
PdcTaskClientRequest
0x180069ed0
PdcTaskClientUnregister
0x180069ec0
ReadPolicy
0x180069ef8
ReadPolicyWithFallback
0x180069ef0
ReleaseEnterprisePolicyValue
0x180069ee8
ReleaseUpdatePolicyValue
0x180069ee0
No function matches your filter.