.NET credential stealer displaying a fake login screen, deployed alongside Mistic in investigated intrusion (f.dll)