One Day Sec

Can you explain how to combine remote DLL download with RegisterXLL() using JScript or PowerShell, and why the Recent directory is used?

JScript code uses `WinHttp.WinHttpRequest.5.1` and `ADODB.Stream` to download a DLL from GitHub, then saves it to the Recent directory (`%AppData%\Microsoft\Windows\Recent`) for better concealment—explorer.exe does not display files in that directory. The PowerShell equivalent uses `System.Net.WebClient` to download and then calls `$excel.RegisterXLL()` to load it. The full JScript example in the article checks for Office installation first and then proceeds with download and execution.
remote downloadJScriptPowerShellRecent directoryconcealment

Browse all Q&A →