Autoruns

Steps:

Autoruns64.exe (Sysinternals)

2: Logon Tab

3: Find directory to overwrite other programs with payload. Check with

Accesschk64.exe -wvu

4: Metasploit Handler

5: msfvenom

6: Transfer payload

7: Copy payload to directory to overwrite original program

8: Wait for logon and connect