25 - MFT
# MFT

Pasted image 20231216230645.png

Q -> What is the SID of the victim user?

SID's usually starts with S-1-5-2 so i greped it here

Pasted image 20231217024027.png

Answer 11 -> S-1-5-21-3720869868-2926106253-3446724670-1003