Powerup Write Hijack DLL (602a1f13-c640-4d73-b053-be9a2fa58b96)
Powerup tool's Write Hijack DLL exploits DLL hijacking for privilege escalation. In it's default mode, it builds a self deleting .bat file which executes malicious command. The detection rule relies on creation of the malicious bat file (debug.bat by default).