In the final stage of the espionage operation, sensitive data is exfiltrated through encrypted channels to evade detection. An internal host is communicating with an external malicious IP, transferring sensitive files named 'confidential_report.pdf' and 'financial_data.xlsx'.