Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: PipeMon's first stage has been executed by a call to <code>CreateProcess</code> with the decryption password in an argument. PipeMon has used a call to <code>LoadLibrary</code> to load its installer.