I have the k.d* file, but I’m stumped as to what to do next. I cant see a way to decrypt it with the info I have. I can’t see any info that stands out from the processes either. Is there a tool or ps cmd like pspy but for windows? Also there is no l*****.j**n file?
EDIT:
Rooted. Was chasing rabbits.
Hints:
File transfers were a pain, nc.exe worked for me.
Root - I love taking a dump on Windows!
Awesome box, learned alot thanks @minatoTW!