BelkaCTF #6: Bogus Bill

BelkaCTF #6 is over, the gang of money forgers is all caught. Thank you for being a part of this! Congratulations to the winners:
Student track: its5Q, belkakaka, kiwi
Professional track: sinsa, sm233, teo4n6

đź“„ BelkaCTF #6: Bogus Bill write-up

Now it was my turn to smirk, and the Chief noticed it, although I tried to conceal the grin. Apparently, I didn't have enough cigar smoke. The Chief waved his hand angrily.

—What are you grinning at? As if you didn't get extra work.

—Yeah, Chief. Sorry, couldn't help it.

Thanks to the Chief's idea, we found that restaurant, but... the camera footage miraculously disappeared!

—Any ideas on what to do next?

—Chief, my gut tells me that guy's computer isn't squeaky clean. I'll look again for some encrypted storage. The file might be drifting in an undercurrent, hidden from plain sight.

Warmup
286
Crypto
Solved 69 times

Which file does the guy keep his encrypted container in?
Format: full path, e.g. C:\VeraCrypt\MyContainer.vc

Flag:


100 100 100 127 100 208 643 40 286 357 603 438 438 315 357 579 691 829 590 50