Yes, as tancop answered, the KOD key is encryption and obfuscation mechanism to secure the CronosPro files. And with enough schema data the correct KOD table can be inferred.
It's derived from a password. The article is from a cyber investigation company and Cronos is a Russian database, so I guess they got some files leaked from a CIS based threat actor and the password wasn't included.
Yes, as tancop answered, the KOD key is encryption and obfuscation mechanism to secure the CronosPro files. And with enough schema data the correct KOD table can be inferred.
It's derived from a password. The article is from a cyber investigation company and Cronos is a Russian database, so I guess they got some files leaked from a CIS based threat actor and the password wasn't included.