Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Sowbug named its tools to masquerade as Windows or Adobe Reader software, such as by using the file name adobecms.exe and the directory <code>CSIDL_APPDATA\microsoft\security</code>.