SetupHijack is a Windows research tool that races installer and updater drop locations to substitute attacker payloads and achieve elevated execution.