-
Excel 2016 is tough.
There is this https://hashcat.net/hashcat/ which runs locally (no admin rights from what I can remember but not 100%) and can brute force passwords.
It isn't easy to use though and, unless the password is really short or you have an idea of the form it will take then it can take a long, long time. I left it running on a file for a week and it still hadn't solved it.
Excel 2016.
Don’t fancy recreating this file from scratch. I’m screwed aren’t I…