hxxp://"cmd[.]exe" /C "powershell[.]exe "Get-ItemProperty 'HKLM[:]\software\VMware, Inc[.]\vcenter server' | select-object -ExpandProperty ProductVersion""

General

Target

http://"cmd.exe" /C "powershell.exe "Get-ItemProperty 'HKLM:\software\VMware, Inc.\vcenter server' | select-object -ExpandProperty ProductVersion""
Sample

230305-gwhbcafh42

Score

1^/10

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact