Would it be possible to share the C2 traffic signatures for variant 2 and 3?