Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Rifdoor has added four additional bytes of data upon launching, then saved the changed version as <code>C:\ProgramData\Initech\Initech.exe</code>.