What is the USO Core Worker Process or usocoreworker.exe? Are they viruses?

Starting with Windows 10 version 1903, many users noticed some strange processes running on the system when checking Task Manager such as usocoreworker.exe, usoclient.exe or USO Core Worker Process. So what role do these processes play in the operation of the system or are they malware? Let's find out in this article.

USO Core Worker Process on Windows 10 1903

USO stands for Update Session Orchestrator (a new tool to coordinate and manage update sessions), a new Windows Update Agent.

Previously, on older versions of Windows, you used the wuauclt.exe / detectnow command to schedule a Windows update scan through the Command Prompt, but now you can no longer use this command on 1903. On Windows 10, Windows Update settings are moved from the traditional Windows Control Panel to the new System Settings app. If you've tried managing Windows Updates on Windows 10, Windows Server 2016, and Windows Server 2019 with the wuauclt command, you'll realize that this command no longer works.

From Windows 10 1903, Windows Update uses usoclient.exe, usocoreworker.exe, usoapi.dll, usocoreps.dll and usosvc.dll to scan for updates, install and continue updates. Windows will also call these processes when adding new features to Windows.It is difficult to find details related to usoclient.exe, or usocoreworker.exe in Microsoft documents. Microsoft did not provide any specific information, they just said: This command is not created to call outside the internal operating system (internal OS). No one outside the operating system can run usoclient directly.

In summary, it can be understood that, usocoreworker.exe, usoclient.exe or USO Core Worker Process is a type of system process, related to the management, installation of Windows updates as well as new features of this operating system. It runs in the background.

Thank You!