usosvc.dll
v10.0.19041.2304
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 12
GetDefaultConfiguration
#1 · 0x30060
GetNextAcceptableTime
#2 · 0x2f0c0
GetNextAcceptableTimeEx
#3 · 0x2f180
GetSmartActiveHours
#4 · 0x2f6d0
GetSmartActiveHoursEx
#5 · 0x2f780
GetSmartBusyCheckVelocityFeature
#6 · 0x33c60
GetTimeIntervalConfidence
#7 · 0x2fce0
GetUserActivityPredictionEx
#8 · 0x34570
ServiceMain
#9 · 0x138b0
SvchostPushServiceGlobals
#10 · 0x13140
DllCanUnloadNow
#11 · 0x8040
DllGetClassObject
#12 · 0x8060
No function matches your filter.
Imported DLLs & functions 327
ApiSetQueryApiSetPresence
0x180067ef0
CoCreateFreeThreadedMarshaler
0x180067f70
CoCreateGuid
0x180067f50
CoCreateInstance
0x180067f38
CoDisconnectContext
0x180067f00
CoDisconnectObject
0x180067f18
CoImpersonateClient
0x180067f48
CoInitializeEx
0x180067f08
CoRegisterClassObject
0x180067f30
CoRevertToSelf
0x180067f58
CoRevokeClassObject
0x180067f28
CoTaskMemAlloc
0x180067f40
CoTaskMemFree
0x180067f20
CoTaskMemRealloc
0x180067f60
CoUninitialize
0x180067f10
CoWaitForMultipleHandles
0x180067f68
DebugBreak
0x180067f88
IsDebuggerPresent
0x180067f80
OutputDebugStringW
0x180067f90
DelayLoadFailureHook
0x180067fa0
ResolveDelayLoadedAPI
0x180067fb0
GetLastError
0x180067fc0
RaiseException
0x180067fe0
SetLastError
0x180067fc8
SetUnhandledExceptionFilter
0x180067fd8
UnhandledExceptionFilter
0x180067fd0
CompareFileTime
0x180068008
CreateDirectoryW
0x180068018
CreateFileW
0x180067ff8
DeleteFileW
0x180068020
FindClose
0x180068030
FindFirstFileW
0x180068000
FindNextFileW
0x180067ff0
GetFileAttributesExW
0x180068028
GetFileAttributesW
0x180068010
GetProcessHeap
0x180068058
HeapAlloc
0x180068060
HeapFree
0x180068068
InitializeSListHead
0x180068090
UnregisterWait
0x1800680a0
PowerClearRequest
0x1800680b8
PowerCreateRequest
0x1800680c8
PowerSetRequest
0x1800680b0
VerifyVersionInfoW
0x1800680c0
DisableThreadLibraryCalls
0x180068108
FindResourceExW
0x1800680e0
FreeLibrary
0x1800680d8
GetModuleFileNameA
0x180068128
GetModuleFileNameW
0x1800680f8
GetModuleHandleExW
0x180068118
GetModuleHandleW
0x180068120
GetProcAddress
0x1800680f0
LoadLibraryExW
0x180068100
LoadResource
0x180068110
SizeofResource
0x1800680e8
LoadLibraryW
0x180068138
FormatMessageW
0x180068148
PathAllocCanonicalize
0x180068170
PathCchAppend
0x180068160
PathCchCanonicalize
0x180068178
PathCchRemoveBackslash
0x180068158
PathCchSkipRoot
0x180068168
ExpandEnvironmentStringsW
0x180068188
CreateProcessAsUserW
0x1800681d8
CreateProcessW
0x180068198
CreateThread
0x1800681e0
GetCurrentProcess
0x1800681b0
GetCurrentProcessId
0x1800681a8
GetCurrentThreadId
0x1800681d0
GetExitCodeProcess
0x1800681c0
GetExitCodeThread
0x1800681c8
OpenProcessToken
0x1800681b8
TerminateProcess
0x1800681a0
IsProcessorFeaturePresent
0x1800681f8
OpenProcess
0x1800681f0
QueryPerformanceCounter
0x180068208
QueryFullProcessImageNameW
0x180068218
RegCloseKey
0x180068250
RegCreateKeyExW
0x180068240
RegDeleteTreeW
0x180068268
RegDeleteValueW
0x180068270
RegEnumKeyExW
0x180068238
RegGetValueW
0x180068258
RegOpenKeyExW
0x180068228
RegQueryInfoKeyW
0x180068248
RegQueryValueExW
0x180068260
RegSetKeySecurity
0x180068278
RegSetValueExW
0x180068230
RegSetKeyValueW
0x180068288
RtlCaptureContext
0x1800682a0
RtlLookupFunctionEntry
0x180068298
RtlVirtualUnwind
0x1800682a8
PathFileExistsW
0x1800682c0
PathFindFileNameW
0x1800682b8
InitiateShutdownW
0x1800682d0
CharNextW
0x1800682f8
lstrcmpiW
0x180068308
AcquireSRWLockExclusive
0x1800683d0
AcquireSRWLockShared
0x180068370
CreateEventExW
0x180068368
CreateEventW
0x180068340
CreateMutexExW
0x180068318
CreateMutexW
0x1800683b0
CreateSemaphoreExW
0x1800683b8
DeleteCriticalSection
0x1800683c0
EnterCriticalSection
0x180068360
InitializeCriticalSection
0x1800683a8
InitializeCriticalSectionAndSpinCount
0x180068330
InitializeCriticalSectionEx
0x180068338
LeaveCriticalSection
0x180068350
OpenEventW
0x180068328
OpenSemaphoreW
0x180068320
ReleaseMutex
0x180068378
ReleaseSemaphore
0x1800683a0
ReleaseSRWLockExclusive
0x1800683c8
ReleaseSRWLockShared
0x180068358
ResetEvent
0x180068398
SetEvent
0x180068390
WaitForMultipleObjectsEx
0x180068388
WaitForSingleObject
0x180068380
WaitForSingleObjectEx
0x180068348
InitOnceBeginInitialize
0x1800683f0
InitOnceComplete
0x1800683e0
Sleep
0x1800683e8
WaitForMultipleObjects
0x180068400
GetLocalTime
0x180068418
GetSystemDirectoryW
0x180068428
GetSystemTime
0x180068410
GetSystemTimeAsFileTime
0x180068430
GetTickCount
0x180068420
GetTickCount64
0x180068438
VerSetConditionMask
0x180068448
CloseThreadpool
0x180068470
CloseThreadpoolTimer
0x180068458
CreateThreadpool
0x180068490
CreateThreadpoolTimer
0x180068460
DisassociateCurrentThreadFromCallback
0x180068468
SetThreadpoolThreadMaximum
0x180068488
SetThreadpoolThreadMinimum
0x180068498
SetThreadpoolTimer
0x180068478
WaitForThreadpoolTimerCallbacks
0x180068480
FileTimeToSystemTime
0x1800684b8
SystemTimeToFileTime
0x1800684b0
TzSpecificLocalTimeToSystemTime
0x1800684a8
RoActivateInstance
0x1800684d0
RoGetActivationFactory
0x1800684c8
WindowsCreateString
0x1800684f0
WindowsCreateStringReference
0x1800684e8
WindowsDeleteString
0x1800684e0
__C_specific_handler
0x1800685d0
__CxxFrameHandler3
0x1800685a8
__CxxFrameHandler4
0x1800685e0
__std_terminate
0x1800685d8
_CxxThrowException
0x1800685b0
_o___std_exception_copy
0x180068628
_o___std_exception_destroy
0x180068620
_o___std_type_info_destroy_list
0x180068618
_o___stdio_common_vsnprintf_s
0x180068610
_o___stdio_common_vsprintf_s
0x180068608
_o___stdio_common_vswprintf
0x1800685f0
_o___stdio_common_vswscanf
0x1800685e8
_o__beginthreadex
0x1800685c8
_o__callnewh
0x1800685c0
_o__cexit
0x1800685b8
_o__configure_narrow_argv
0x180068638
_o__crt_atexit
0x180068630
_o__errno
0x180068600
_o__execute_onexit_table
0x1800685f8
_o__initialize_narrow_environment
0x180068500
_o__initialize_onexit_table
0x180068508
_o__invalid_parameter_noinfo
0x180068510
_o__invalid_parameter_noinfo_noreturn
0x180068518
_o__purecall
0x180068520
_o__recalloc
0x180068528
_o__register_onexit_function
0x180068530
_o__seh_filter_dll
0x180068538
_o__set_errno
0x180068540
_o__wcsicmp
0x180068548
_o__wcsnicmp
0x180068550
_o__wtoi
0x180068560
_o__wtol
0x180068568
_o_free
0x180068570
_o_malloc
0x180068578
_o_strncpy_s
0x180068580
_o_strtol
0x180068588
_o_terminate
0x180068590
_o_towlower
0x180068598
_o_wcsncpy_s
0x1800685a0
memcmp
0x180068558
memcpy
0x180068650
memmove
0x180068658
strchr
0x180068640
strrchr
0x180068648
ControlTraceW
0x180068698
EnableTraceEx2
0x1800686a0
StartTraceW
0x1800686a8
QueryTraceW
0x1800686b8
EventActivityIdControl
0x1800686c8
EventRegister
0x1800686d0
EventSetInformation
0x1800686d8
EventUnregister
0x1800686e0
EventWriteTransfer
0x1800686e8
RegisterWaitUntilOOBECompleted
0x1800686f8
UnregisterWaitUntilOOBECompleted
0x180068700
CallNtPowerInformation
0x180068720
PowerRegisterSuspendResumeNotification
0x180068710
PowerUnregisterSuspendResumeNotification
0x180068718
PowerSettingRegisterNotification
0x180068738
PowerSettingUnregisterNotification
0x180068730
AdjustTokenPrivileges
0x180068748
AllocateAndInitializeSid
0x180068760
CheckTokenMembership
0x180068758
DuplicateTokenEx
0x180068750
FreeSid
0x180068778
GetTokenInformation
0x180068768
PrivilegeCheck
0x180068770
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180068788
RegisterServiceCtrlHandlerExW
0x1800687a0
SetServiceStatus
0x180068798
CloseServiceHandle
0x1800687b8
OpenSCManagerW
0x1800687c0
OpenServiceW
0x1800687b0
I_QueryTagInformation
0x1800687d0
GetPersistedRegistryLocationW
0x1800687e0
CertVerifyCertificateChainPolicy
0x180067e00
_Cnd_broadcast
0x180068980
_Cnd_destroy_in_situ
0x180068990
_Cnd_do_broadcast_at_thread_exit
0x180068958
_Cnd_init_in_situ
0x180068968
_Cnd_wait
0x180068978
_Mtx_destroy_in_situ
0x180068830
_Mtx_init_in_situ
0x180068818
_Mtx_lock
0x180068840
_Mtx_unlock
0x180068868
_Thrd_detach
0x180068950
_Xtime_get_ticks
0x180068878
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
0x180068908
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
0x1800688f0
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
0x1800688a8
?_Throw_C_error@std@@YAXH@Z
0x180068838
?_Throw_Cpp_error@std@@YAXH@Z
0x180068960
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
0x180068910
?_Xbad_alloc@std@@YAXXZ
0x180068988
?_Xlength_error@std@@YAXPEBD@Z
0x180068848
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
0x1800688d8
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
0x1800688e0
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
0x180068860
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x1800688b0
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x1800688e8
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
0x180068870
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
0x1800688f8
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
0x1800688d0
?flags@ios_base@std@@QEBAHXZ
0x180068820
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
0x180068900
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
0x1800688a0
?good@ios_base@std@@QEBA_NXZ
0x180068828
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
0x180068890
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
0x180068918
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
0x180068898
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
0x1800688c8
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
0x180068920
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
0x1800688b8
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
0x180068928
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
0x180068880
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
0x180068888
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
0x180068930
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
0x1800688c0
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
0x180068938
?uncaught_exception@std@@YA_NXZ
0x180068970
?width@ios_base@std@@QEAA_J_J@Z
0x180068858
?width@ios_base@std@@QEBA_JXZ
0x180068850
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
0x180068940
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
0x180068948
ntdll.dll
15
DbgPrintEx
0x1800689a0
LdrAddRefDll
0x180068a08
LdrUnloadDll
0x180068a00
NtIsSystemResumeAutomatic
0x1800689f0
NtPowerInformation
0x1800689f8
NtQueryWnfStateData
0x1800689e0
RtlAllocateHeap
0x1800689c0
RtlFreeHeap
0x1800689b8
RtlNtStatusToDosError
0x180068a10
RtlPublishWnfStateData
0x1800689d0
RtlRaiseStatus
0x1800689a8
RtlRandomEx
0x1800689c8
RtlReAllocateHeap
0x1800689b0
RtlSubscribeWnfStateChangeNotification
0x1800689e8
RtlUnsubscribeWnfNotificationWaitForCompletion
0x1800689d8
SysAllocString
0x180067e48
SysFreeString
0x180067e50
VarBstrCmp
0x180067e10
VariantChangeType
0x180067e20
VariantClear
0x180067e38
VariantCopy
0x180067e28
VariantInit
0x180067e40
VariantTimeToSystemTime
0x180067e18
VarUI4FromStr
0x180067e30
0x180068a20
I_RpcBindingInqLocalClientPID
0x180067e98
NdrClientCall3
0x180067e78
RpcBindingFree
0x180067e70
RpcBindingFromStringBindingW
0x180067e90
RpcBindingSetAuthInfoExW
0x180067e68
RpcStringBindingComposeW
0x180067e88
RpcStringFreeW
0x180067e60
UuidCreate
0x180067e80
PdcTaskClientRegister
0x180067eb8
PdcTaskClientRequest
0x180067eb0
PdcTaskClientUnregister
0x180067ea8
ReadPolicy
0x180067ed0
ReadPolicyWithFallback
0x180067ed8
ReleaseEnterprisePolicyValue
0x180067ee0
ReleaseUpdatePolicyValue
0x180067ec8
No function matches your filter.