Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: ToddyCat has used `WinExec` to execute commands received from C2 on compromised hosts.