olevba+mraptor: report encrypted Excel files that may contain XLM macros #556
Description
See https://isc.sans.edu/diary/25990
If plugin_biff reports a FILEPASS record is present, and there is no VBA macro, then maybe the file contains an encrypted XLM macro.
TODO: check if it works when the password is guessable, such as VelvetSweatshop.