Is the cookie used for the site to function (or a component of it) or for tracking/ads. Only the latter needs consent.

It's tracking cookies. I have Google, Facebook and Hotjar cookies set on initial request before even having seen the cookie consent box.

However that's how the vast majority of sites implement the cookie consent regulation, and authorities (like ICO in UK) has decided to not do anything about it.

According to the GDPR even an IP address needs consent, and those are inherently transmitted when loading a third-party library regardless of cookies. Given that social media sharing isn’t a necessary function of the website, they should be asking for consent before loading the libraries, or just using a locally-hosted icon pointing to a sharing link, so that the target social network gets the data only when the button is actually clicked.

Is a session cookie with datetime of access (and last visit somehow), so probably fine.

not up on cookies and Gdpr tbh, I deal with other types of data normally.

You can drop cookies that are “essential to running your business” without consent, the gdpr tcf 1.1 consent management platforms drop a “euconsent” cookie to store your consent choice lol.