ConsentUxClient.dll

Description: Implementation of client-side Consent UX API

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4957

Architecture: 64-bit

Operating System: Windows NT

SHA256: e8886d8c62cb28a81fc7a060a8da15f5

File Size: 166.5 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllGetActivationFactory (Ordinal: 1, Address: 0x6850)
  • ServiceMain (Ordinal: 2, Address: 0x66e0)
  • SvchostPushServiceGlobals (Ordinal: 3, Address: 0x66d0)
  • DllCanUnloadNow (Ordinal: 4, Address: 0x67c0)

Imported DLLs & Functions

api-ms-win-appmodel-runtime-l1-1-0.dll
  • GetPackagesByPackageFamily (Address: 0x18001e878)
api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18001e888)
api-ms-win-core-atoms-l1-1-0.dll
  • GlobalGetAtomNameW (Address: 0x18001e898)
api-ms-win-core-com-l1-1-0.dll
  • CoCreateFreeThreadedMarshaler (Address: 0x18001e8d0)
  • CoCreateInstance (Address: 0x18001e908)
  • CoDisconnectContext (Address: 0x18001e8f8)
  • CoIncrementMTAUsage (Address: 0x18001e8e0)
  • CoMarshalInterface (Address: 0x18001e8b0)
  • CoRegisterClassObject (Address: 0x18001e900)
  • CoReleaseMarshalData (Address: 0x18001e8c0)
  • CoResumeClassObjects (Address: 0x18001e8f0)
  • CoRevokeClassObject (Address: 0x18001e8e8)
  • CoTaskMemAlloc (Address: 0x18001e8d8)
  • CoTaskMemFree (Address: 0x18001e8a8)
  • CoWaitForMultipleHandles (Address: 0x18001e8c8)
  • CreateStreamOnHGlobal (Address: 0x18001e8b8)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x18001e918)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18001e928)
  • IsDebuggerPresent (Address: 0x18001e930)
  • OutputDebugStringW (Address: 0x18001e938)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18001e948)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18001e958)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18001e980)
  • RaiseException (Address: 0x18001e978)
  • SetLastError (Address: 0x18001e970)
  • SetUnhandledExceptionFilter (Address: 0x18001e968)
  • UnhandledExceptionFilter (Address: 0x18001e988)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18001e998)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18001e9b0)
  • HeapAlloc (Address: 0x18001e9b8)
  • HeapFree (Address: 0x18001e9a8)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x18001e9d8)
  • InterlockedFlushSList (Address: 0x18001e9d0)
  • InterlockedPushEntrySList (Address: 0x18001e9c8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • UnregisterWait (Address: 0x18001e9e8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18001ea00)
  • GetModuleFileNameA (Address: 0x18001e9f8)
  • GetModuleHandleExW (Address: 0x18001ea08)
  • GetModuleHandleW (Address: 0x18001ea18)
  • GetProcAddress (Address: 0x18001ea10)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18001ea28)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18001ea40)
  • GetCurrentProcessId (Address: 0x18001ea50)
  • GetCurrentThreadId (Address: 0x18001ea58)
  • OpenProcessToken (Address: 0x18001ea38)
  • TerminateProcess (Address: 0x18001ea48)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x18001ea70)
  • OpenProcess (Address: 0x18001ea68)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18001ea80)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18001eaa8)
  • RegEnumKeyExW (Address: 0x18001eaa0)
  • RegGetValueW (Address: 0x18001ea98)
  • RegOpenCurrentUser (Address: 0x18001ea90)
  • RegOpenKeyExW (Address: 0x18001eab8)
  • RegQueryInfoKeyW (Address: 0x18001eab0)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18001eac8)
  • RtlLookupFunctionEntry (Address: 0x18001ead0)
  • RtlVirtualUnwind (Address: 0x18001ead8)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x18001eae8)
  • MultiByteToWideChar (Address: 0x18001eaf0)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18001eb48)
  • AcquireSRWLockShared (Address: 0x18001eb20)
  • CreateEventExW (Address: 0x18001eb58)
  • CreateMutexExW (Address: 0x18001eb00)
  • CreateSemaphoreExW (Address: 0x18001eb60)
  • OpenSemaphoreW (Address: 0x18001eb10)
  • ReleaseMutex (Address: 0x18001eb38)
  • ReleaseSemaphore (Address: 0x18001eb50)
  • ReleaseSRWLockExclusive (Address: 0x18001eb30)
  • ReleaseSRWLockShared (Address: 0x18001eb08)
  • SetEvent (Address: 0x18001eb28)
  • WaitForSingleObject (Address: 0x18001eb40)
  • WaitForSingleObjectEx (Address: 0x18001eb18)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18001eb80)
  • InitOnceComplete (Address: 0x18001eb78)
  • InitOnceExecuteOnce (Address: 0x18001eb70)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18001eb90)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18001eba8)
  • EncodePointer (Address: 0x18001eba0)
api-ms-win-core-winrt-error-l1-1-0.dll
  • GetRestrictedErrorInfo (Address: 0x18001ebc0)
  • RoOriginateError (Address: 0x18001ebd0)
  • RoOriginateErrorW (Address: 0x18001ebc8)
  • RoTransformError (Address: 0x18001ebd8)
  • SetRestrictedErrorInfo (Address: 0x18001ebb8)
api-ms-win-core-winrt-error-l1-1-1.dll
  • IsErrorPropagationEnabled (Address: 0x18001ebf8)
  • RoGetMatchingRestrictedErrorInfo (Address: 0x18001ebe8)
  • RoOriginateLanguageException (Address: 0x18001ebf0)
  • RoReportFailedDelegate (Address: 0x18001ec00)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x18001ec18)
  • RoGetActivationFactory (Address: 0x18001ec10)
  • RoRegisterActivationFactories (Address: 0x18001ec20)
  • RoRevokeActivationFactories (Address: 0x18001ec28)
api-ms-win-core-winrt-propertysetprivate-l1-1-1.dll
  • RoCreatePropertySetSerializer (Address: 0x18001ec38)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x18001ec80)
  • WindowsCreateStringReference (Address: 0x18001ec48)
  • WindowsDeleteString (Address: 0x18001ec60)
  • WindowsDeleteStringBuffer (Address: 0x18001ec88)
  • WindowsDuplicateString (Address: 0x18001ec50)
  • WindowsGetStringRawBuffer (Address: 0x18001ec58)
  • WindowsIsStringEmpty (Address: 0x18001ec70)
  • WindowsPreallocateStringBuffer (Address: 0x18001ec90)
  • WindowsPromoteStringBuffer (Address: 0x18001ec68)
  • WindowsStringHasEmbeddedNull (Address: 0x18001ec78)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x18001ed08)
  • __CxxFrameHandler3 (Address: 0x18001ed10)
  • __CxxFrameHandler4 (Address: 0x18001ed88)
  • __std_terminate (Address: 0x18001ed80)
  • _CxxThrowException (Address: 0x18001ed18)
  • _o___std_exception_copy (Address: 0x18001ed28)
  • _o___std_exception_destroy (Address: 0x18001ed20)
  • _o___std_type_info_destroy_list (Address: 0x18001ecd0)
  • _o___stdio_common_vsnprintf_s (Address: 0x18001ed68)
  • _o___stdio_common_vswprintf (Address: 0x18001ed58)
  • _o__callnewh (Address: 0x18001ed38)
  • _o__cexit (Address: 0x18001ed30)
  • _o__configure_narrow_argv (Address: 0x18001ed60)
  • _o__crt_atexit (Address: 0x18001ed40)
  • _o__errno (Address: 0x18001ed50)
  • _o__execute_onexit_table (Address: 0x18001ed48)
  • _o__initialize_narrow_environment (Address: 0x18001eca0)
  • _o__initialize_onexit_table (Address: 0x18001eca8)
  • _o__invalid_parameter_noinfo (Address: 0x18001ecb0)
  • _o__purecall (Address: 0x18001ecb8)
  • _o__register_onexit_function (Address: 0x18001ecc0)
  • _o__seh_filter_dll (Address: 0x18001ecc8)
  • _o_free (Address: 0x18001ece0)
  • _o_iswspace (Address: 0x18001ece8)
  • _o_malloc (Address: 0x18001ecf0)
  • _o_memcpy_s (Address: 0x18001ecf8)
  • _o_terminate (Address: 0x18001ed00)
  • memcpy (Address: 0x18001ed90)
  • memmove (Address: 0x18001ecd8)
  • wcschr (Address: 0x18001ed70)
  • wcsrchr (Address: 0x18001ed78)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x18001eda8)
  • _initterm_e (Address: 0x18001eda0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x18001edb8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x18001ede0)
  • EventRegister (Address: 0x18001edd8)
  • EventSetInformation (Address: 0x18001edd0)
  • EventUnregister (Address: 0x18001edc8)
  • EventWriteTransfer (Address: 0x18001ede8)
api-ms-win-rtcore-ntuser-private-l1-1-0.dll
  • GetWindowBand (Address: 0x18001edf8)
api-ms-win-rtcore-ntuser-window-l1-1-0.dll
  • GetForegroundWindow (Address: 0x18001ee10)
  • GetPropW (Address: 0x18001ee08)
  • GetWindow (Address: 0x18001ee18)
  • GetWindowThreadProcessId (Address: 0x18001ee20)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x18001ee30)
api-ms-win-service-core-l1-1-0.dll
  • RegisterServiceCtrlHandlerExW (Address: 0x18001ee40)
  • SetServiceStatus (Address: 0x18001ee48)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x18001ee58)
  • SHTaskPoolQueueTask (Address: 0x18001ee60)
combase.dll
  • (Address: 0x18001ee88)
  • (Address: 0x18001ee90)
  • (Address: 0x18001ee80)
  • (Address: 0x18001ee78)
  • (Address: 0x18001ee70)
ntdll.dll
  • NtQueryInformationToken (Address: 0x18001eec0)
  • RtlAllocateHeap (Address: 0x18001eeb0)
  • RtlCompareUnicodeString (Address: 0x18001eea8)
  • RtlFreeHeap (Address: 0x18001eeb8)
  • RtlInitUnicodeString (Address: 0x18001eec8)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x18001eea0)
OLEAUT32.dll
  • SysFreeString (Address: 0x18001e868)
  • SysStringLen (Address: 0x18001e860)