https://ja.meswoolley.co.uk/persistence-using-dll-hijacking/
Maintaining Persistence using Explorer and DLL Hijacking - JA.MESWOOLLEY.CO.UK