Can someone explain all the steps here?<p>I get that:<p>1) the browser will silently download a DLL to the Downloads folder<p>2) the installer does <i>something</i> that causes the DLL to run, compromising the machine.<p>I get why people don&#x27;t like (1), but why is (2) actually happening? Are the DLL hijackers exploiting name collisions, is an API being abused, or something else? And is there a robust way to prevent this even if browsers persist in silent downloads?