You can download this challenge image here

Somewhere within one of the sub-directories of c:\Windows\System32 is a file that has been changed so that it is owned by one of the users on the system.

Answer the Forensics Questions correctly and screenshot that you have a 100 on the image.