Option C. Olevba is the best answer because CHFI v11 explicitly includes Analyzing Suspicious Word, Excel, and PDF Documents and Tools to Analyze Suspicious Word and PDF Documents as part of malware forensics and static/dynamic analysis.

The suspicious file here is a Word document , and the question asks for a tool suitable for static analysis to detect hidden malicious content. Olevba is specifically known for analyzing Office documents and extracting or inspecting VBA macro content , suspicious strings, and obfuscation indicators without executing the document. That fits the requirement exactly.

FLOSS is mainly used for extracting obfuscated strings from binaries. PEStudio is more appropriate for PE files such as Windows executables and DLLs. Cuckoo Sandbox is a dynamic analysis environment, not the most direct tool for static Office document inspection. Therefore, within CHFI’s malware-document analysis scope, the most effective choice is Olevba for static analysis of the suspicious Word file.