Peter M. Groen / oletools

This is an interesting one since "our" old implementation of is_encrypted
claims that the embedded file is still encrypted (which it is not), but
the msoffcrypto-is_encrypted gets it right.