Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: A OilRig macro has run a PowerShell command to decode file contents. OilRig has also used certutil to decode base64-encoded files on victims.