nerdexam
GIAC

GREM · Question #181

When analyzing an RTF file, which of the following strings would likely indicate the presence of an embedded object or shellcode?

The correct answer is D. {\object}. See the full explanation below for the reasoning.

Question

When analyzing an RTF file, which of the following strings would likely indicate the presence of an embedded object or shellcode?

Options

  • A{\fonttbl}
  • B{*\shppict}
  • C{\colortbl;}
  • D{\object}

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    2% (1)
  • C
    12% (5)
  • D
    80% (33)

Community Discussion

No community discussion yet for this question.

Full GREM Practice