Actor
Adversaries use the Windows Startup folder to establish persistence by creating malicious files that execute automatically upon system boot or user logon.