etw-patch 2 VerShadow / FUD Crypt: A MinGW VERSION.dll Carrier With A Catbox Fallback And A Live Test Payload Apr 26, 2026 Stage1 (22.exe) Loader Reversing, Part I: Stage Decryption, Evasion, and Attribution Feb 23, 2026