The  loader has used API calls to spawn `MSBuild.exe` in a suspended state before injecting the decrypted  binary into it.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: The  loader has used API calls to spawn `MSBuild.exe` in a suspended state before injecting the decrypted  binary into it. ### Response: T1055.012.