Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Gelsemium can retrieve data from specific Windows directories, as well as open random files as part of Virtualization/Sandbox Evasion.