Not long ago a suspicious looking email with a non-standard “.dotm” attachment came across my desk for analysis. (Looks totally legit, right???)  While digging into