ConsentUX.dll

Description: Device Broker Consent Prompt

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 251e04f513841b2a8e55219e795284a6

File Size: 113.4 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xa560)
DllGetActivationFactory (Ordinal: 2, Address: 0xa590)
DllGetClassObject (Ordinal: 3, Address: 0xa5d0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x1800136e0)
CoTaskMemAlloc (Address: 0x1800136f0)
CoTaskMemFree (Address: 0x1800136f8)
CoTaskMemRealloc (Address: 0x180013700)
CoWaitForMultipleHandles (Address: 0x1800136e8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180013710)
IsDebuggerPresent (Address: 0x180013718)
OutputDebugStringW (Address: 0x180013720)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180013730)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180013740)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180013768)
RaiseException (Address: 0x180013760)
SetLastError (Address: 0x180013758)
SetUnhandledExceptionFilter (Address: 0x180013750)
UnhandledExceptionFilter (Address: 0x180013770)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180013780)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180013790)
HeapAlloc (Address: 0x180013798)
HeapFree (Address: 0x1800137a0)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x1800137b0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800137d8)
FindResourceExW (Address: 0x1800137e8)
GetModuleFileNameA (Address: 0x1800137c0)
GetModuleHandleExW (Address: 0x1800137f8)
GetModuleHandleW (Address: 0x1800137c8)
GetProcAddress (Address: 0x1800137d0)
LoadResource (Address: 0x1800137f0)
LockResource (Address: 0x1800137e0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180013818)
GetThreadPreferredUILanguages (Address: 0x180013808)
GetUserPreferredUILanguages (Address: 0x180013810)
SetThreadPreferredUILanguages (Address: 0x180013820)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180013848)
GetCurrentProcessId (Address: 0x180013830)
GetCurrentThreadId (Address: 0x180013850)
OpenProcessToken (Address: 0x180013840)
TerminateProcess (Address: 0x180013838)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x180013860)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180013870)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180013890)
RtlLookupFunctionEntry (Address: 0x180013888)
RtlVirtualUnwind (Address: 0x180013880)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x1800138a0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800138d0)
AcquireSRWLockShared (Address: 0x180013910)
CreateEventExW (Address: 0x1800138b8)
CreateMutexExW (Address: 0x1800138f8)
CreateSemaphoreExW (Address: 0x1800138d8)
DeleteCriticalSection (Address: 0x180013928)
EnterCriticalSection (Address: 0x180013900)
InitializeCriticalSectionEx (Address: 0x1800138e8)
LeaveCriticalSection (Address: 0x1800138e0)
OpenSemaphoreW (Address: 0x1800138c8)
ReleaseMutex (Address: 0x1800138b0)
ReleaseSemaphore (Address: 0x180013908)
ReleaseSRWLockExclusive (Address: 0x180013918)
ReleaseSRWLockShared (Address: 0x1800138f0)
SetEvent (Address: 0x1800138c0)
WaitForSingleObject (Address: 0x180013930)
WaitForSingleObjectEx (Address: 0x180013920)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180013940)
InitOnceComplete (Address: 0x180013948)
InitOnceExecuteOnce (Address: 0x180013958)
Sleep (Address: 0x180013950)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x180013970)
GetTickCount (Address: 0x180013968)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180013988)
CreateThreadpoolTimer (Address: 0x180013990)
SetThreadpoolTimer (Address: 0x180013980)
WaitForThreadpoolTimerCallbacks (Address: 0x180013998)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x1800139a8)
EncodePointer (Address: 0x1800139b0)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x1800139c0)
RoOriginateErrorW (Address: 0x1800139c8)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x1800139d8)
RoGetActivationFactory (Address: 0x1800139e0)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1800139f0)
WindowsCreateStringReference (Address: 0x180013a00)
WindowsDeleteString (Address: 0x180013a10)
WindowsGetStringRawBuffer (Address: 0x180013a08)
WindowsIsStringEmpty (Address: 0x1800139f8)
WindowsStringHasEmbeddedNull (Address: 0x180013a18)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x180013a30)
EventRegister (Address: 0x180013a38)
EventSetInformation (Address: 0x180013a48)
EventUnregister (Address: 0x180013a40)
EventWriteTransfer (Address: 0x180013a28)

api-ms-win-security-base-l1-1-0.dll

CopySid (Address: 0x180013a80)
DuplicateTokenEx (Address: 0x180013a70)
GetLengthSid (Address: 0x180013a78)
GetTokenInformation (Address: 0x180013a60)
ImpersonateLoggedOnUser (Address: 0x180013a68)
RevertToSelf (Address: 0x180013a58)

api-ms-win-security-capability-l1-1-0.dll

CapabilityCheck (Address: 0x180013a90)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x180013aa0)

deviceaccess.dll

ProcessTrackerInsertOrWait (Address: 0x180013ab0)
ProcessTrackerRemove (Address: 0x180013ab8)

msvcrt.dll

__C_specific_handler (Address: 0x180013ae8)
__CxxFrameHandler3 (Address: 0x180013b20)
__dllonexit (Address: 0x180013ae0)
_amsg_exit (Address: 0x180013b68)
_callnewh (Address: 0x180013b58)
_initterm (Address: 0x180013b38)
_lock (Address: 0x180013ac8)
_onexit (Address: 0x180013b08)
_purecall (Address: 0x180013b60)
_ui64tow_s (Address: 0x180013b70)
_unlock (Address: 0x180013ad0)
_vsnwprintf (Address: 0x180013af8)
_XcptFilter (Address: 0x180013b78)
free (Address: 0x180013b80)
malloc (Address: 0x180013b40)
memcmp (Address: 0x180013ad8)
memcpy (Address: 0x180013af0)
memcpy_s (Address: 0x180013b00)
memmove_s (Address: 0x180013b28)
memset (Address: 0x180013b30)
swscanf (Address: 0x180013b18)
wcschr (Address: 0x180013b48)
wcscmp (Address: 0x180013b88)
wcsrchr (Address: 0x180013b50)
wcsstr (Address: 0x180013b10)

ntdll.dll

EtwTraceMessage (Address: 0x180013bc8)
NtQueryInformationToken (Address: 0x180013b98)
RtlAllocateHeap (Address: 0x180013ba0)
RtlCompareUnicodeString (Address: 0x180013bb0)
RtlFreeHeap (Address: 0x180013bb8)
RtlInitUnicodeString (Address: 0x180013bc0)
RtlNtStatusToDosErrorNoTeb (Address: 0x180013ba8)