Clop's bespoke Windchill web shell decrypts keystore credentials and maps vaults for mass exfiltration.