Original writeup (https://medium.com/@sbasu7241/otterctf-2018-memory-forensics-write-up-part-2-14bf86e3ab94?postPublishedType=initial).