Adversaries may configure system settings to automatically execute a program during system boot or logon to maintain persistence.
The Emotet malware creates registry run keys to ensure it executes every time the user logs in, maintaining persistence even after reboots.