0

I have App.exe that loads A.dll & B.dll. A.dll loads fips.dll from space c:/App/A/fips.dll B.dll loads Fips.dll from space c:/App/B/fips.dll. I see App.exe is loading both fips.dll from both folders. How can I confirm if A.dll is referring to c:/App/A/fips.dll module for FIPS requirement and B.dll is referring to c:/App/B/fips.dll for FIPS related usage.

3
  • 1
    Look to import table (IAT) of the module, and to where is pointer. Commented Aug 27 at 7:40
  • I tried windbg, the module name of fips.dll is updated. it is like fips_9180000.dll for the second load. Is windows updating the module name on its own. lm 09180000 09322000 fips_9180000 (deferred) 7a790000 7a932000 fips (deferred) lm m fips* start end module name 09180000 09322000 fips_9180000 (deferred) 7a790000 7a932000 fips (deferred) Commented Sep 9 at 11:36
  • without look for binary under debugger impossible say what is happens Commented Sep 9 at 11:38

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.