Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: ShimRat has decompressed its core DLL using shellcode once an impersonated antivirus component was running on a system.