Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Smoke Loader spawns a new copy of c:\windows\syswow64\explorer.exe and then replaces the executable code in memory with malware.