Memory Acquisition and Analysis Tasks

In the Memory and Analysis Class. The task answers are not correct. The only answer that is correct is the first one which is for the NTVersion. The others are wrong. I saw the second task (ProcessID) has been documented. The third (IP Address) has a hint of XX.XX.XX.XXX. The IPaddress seen in Netscan and IPConfig is XX.XXX.XX.XX. The last task (DLL) is asking for the DLL for WSI.exe. I don’t even have WSI.exe in my DLL List.

I was able to get all the answers, including 2-4:

If you can show screenshots of what you think the answers are and why, I may be able to help you find the right answers.