It looks like a remote tool for accessing web resources from compromised devices using stolen credentials. It's how I imagine malicious actors make use of cookies found elsewhere. It's a unique opportunity for them and they put a lot of effort to make use of it. Bravo!