4.4.9.2 Features Memory modification tracking for loaded DLLs. Memory diff generation for modified DLLs. Fixes Handle some non-conforming DLLs from yielding incorrect authenticode hash results. MD5 Hashes service.exe = 7b76a84809347d1caa4f46217d7c02ad CCRRSecMon.sys (Windows7) = 27cc77a22706f1f007f0c8f433910efd CCRRSecMon.sys (Windows8) = d94978e73452be5869b194fe234fc125 CCRRSecMon.sys (Windows10) = c321cf4abafbd8f2b6d3ef1917904d57