vigenere 1 Amadey cred64.dll: Reversing the v5.78 Credential-Stealer Plugin (botnet 54e64e) May 2, 2026