Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: APT41 has executed <code>file /bin/pwd</code> on exploited victims, perhaps to return architecture related information.