Modules

MemoScope can display modules loaded by the dumped process. These modules use some unmanaged memory but not on the heap so you can't see it in the main view.

Don't forget that some modules can be generated dynamically at runtime and are not present on the disk or in the path of your executable's process.

For instance, there is a bug in XmlSerializer explained in its MSDN pages (see "Dynamically Generated Assemblies" paragraph).

Another article gives more details about this memory leak.

MemoDummy has a script (XmlModuleGenerator) to create dozens of dynamically generated modules.