Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: SideCopy has sent Microsoft Office Publisher documents to victims that have embedded malicious macros that execute an hta file via calling `mshta.exe`.