Challenge Instructions:
Our incident response team recovered the malware* below from one of the hosts in our network. The attacker's C2 server is down, but they were able to pull a PCAP with the network communications that occurred.
Can you tell us what they exfiltrated from the machine?