Amadey credential-stealing plugin downloaded from C2 /Plugins/ path and loaded via rundll32.exe to steal credentials.
