# 4.4.9.2

# Features

- Memory modification tracking for loaded DLLs.
- Memory diff generation for modified DLLs.

# Fixes

- Handle some non-conforming DLLs from yielding incorrect authenticode hash results.

# MD5 Hashes

```
service.exe  = 7b76a84809347d1caa4f46217d7c02ad
CCRRSecMon.sys (Windows7)        = 27cc77a22706f1f007f0c8f433910efd
CCRRSecMon.sys (Windows8)        = d94978e73452be5869b194fe234fc125
CCRRSecMon.sys (Windows10)       = c321cf4abafbd8f2b6d3ef1917904d57
```