Nssm-2.24 Privilege Escalation Here

The service runs as (by default for manually installed services), executing malware.exe with the highest privileges.

The attacker waits for a reboot or uses wmic service to attempt a restart if they have the rights to do so. How to Mitigate NSSM-2.24 Risks nssm-2.24 privilege escalation