Task Force Phoenix has intercepted faint signals from Volnaya’s government complex—a stream of HVAC control traffic buzzing over the wire. Buried in the chatter lies a critical piece of intel, the first whisper of Operation Blackout’s plan to turn the smart building’s systems against its masters.

Opened the file in wireshark and followed the tcp stream:

The strings in red that look like p4854427b556e6c might be an indicator of some hex values that can be decoded.

Using https://www.rapidtables.com/convert/number/hex-to-ascii.html and excluding the p at the start:

That is definitely the start of a flag. Finding all the strings and combining them gave me:

My guess is HTB{Unl0ck1ng_th3_v3nts_0f_d15rupt10n}

That worked!