Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Kwampirs establishes persistence by adding a new service with the display name "WMI Performance Adapter Extension" in an attempt to masquerade as a legitimate WMI service.