Memprocfs

this challenge makes us go through a .raw file containing all the content of a windows file system at some point. Checking the processes and applications, we see TrueCrypt file that we can use to retrieve content and break AES encryption to get the flag