malicious open xml document scanner framework