Exercise 5: Additional note
Unfortunately, there has been a problem with the picture in task 2 - the version of the memory image that I uploaded does not contain the picture in a reasonably accessible format. It does, however, contain a screenshot. So ignore the description of the picture and describe the screenshot and how you obtained it. The information in the screenshot may confirm something you have already found out, but do not use it as a substitute for other memory analysis methods.