Label: small process-state model. Not a memory image. Not Volatility output. Acquisition time on the card: 10:00 UTC, 2026-04-02. Method: typed table. No RAM was copied. PID 410 name note-reader PID 422 name lamp-index PID 438 name clock The table lists three names present in the model at 10:00. It does not list earlier logins. It does not list processes that had already ended.