Keystone State–Keystone from Vault 7?
>https:// www.neowin.net/news/wikileaks-reveals-information-about-cias-angelfire-hacking-toolset
I know the anons already know this, but:
"This software starts user applications and never touches the file system (aside from the possibility of paging) and therefore leave hardly any evidence, if any. Keystone starts processes as svchost.exe and, when viewed in the task manager, all of its properties will be consistent with a real instance of svchost.exe including image path (unless Windows is installed in a path or partition) and parent process."
Also Jupiter Ascending–Angelfire is the name of the whole package?