Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: NightClub can load a module to call `CreateCompatibleDC` and `GdipSaveImageToStream` for screen capture.