has a HWP document stealer module which changes the default program association in the registry to open HWP documents.
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: has a HWP document stealer module which changes the default program association in the registry to open HWP documents. ### Response: T1546.001.