OLE allows Office users to embed files inside documents. The icon and caption of an attached file can be modified to make it look harmless (i.e. ReadMe.xls). Use Insert > Object > Create from file to add a new file, and enable display as icon (also change the icon of course).
To evade protected view from stopping OLE, use Microsoft Publisher, as it does not enable protected view for documents from the Internet.