I have App.exe that loads A.dll & B.dll. A.dll loads fips.dll from space c:/App/A/fips.dll B.dll loads Fips.dll from space c:/App/B/fips.dll. I see App.exe is loading both fips.dll from both folders.
How can I confirm if A.dll is referring to c:/App/A/fips.dll module for FIPS requirement and B.dll is referring to c:/App/B/fips.dll for FIPS related usage.
-
1Look to import table (IAT) of the module, and to where is pointer.RbMm– RbMm2025-08-27 07:40:03 +00:00Commented Aug 27 at 7:40
-
I tried windbg, the module name of fips.dll is updated. it is like fips_9180000.dll for the second load. Is windows updating the module name on its own. lm 09180000 09322000 fips_9180000 (deferred) 7a790000 7a932000 fips (deferred) lm m fips* start end module name 09180000 09322000 fips_9180000 (deferred) 7a790000 7a932000 fips (deferred)Priyanka Chauhan– Priyanka Chauhan2025-09-09 11:36:11 +00:00Commented Sep 9 at 11:36
-
without look for binary under debugger impossible say what is happensRbMm– RbMm2025-09-09 11:38:01 +00:00Commented Sep 9 at 11:38
Add a comment
|