Open-source atomic malware analysis

Analyze another

11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/4/Windows/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot

JAVASCRIPT
Verdict: BENIGN
Mal-ecule
O(As)Md
Size 136.9 KB download
First seen 11 days ago
Analyzed 3 days ago
Ecosystem windows
Source microsoft.com
autopilotDevicePreparation-vm.js javascript
1
2 "use strict";
3
4 define([
5 'lib/knockout',
6 'legacy/bridge',
7 'legacy/events',
8 'legacy/appObjectFactory', // necessary for OOBE framework, even though not directly used here Contains common English function words
9 'autopilot/commercialDiagnosticsUtiliti
18:32
19 sessionUtilities) {
20
21 this.AUTOPILOT_ORCHESTRATOR_TIMEOUT_IN_MS = 5 * 60 * 1000;
22
23 this.MAX_WINRT_RETRY_COUNT
113:44 s.namespaceTsmState("PageStart"); // Namespace the state names Contains common English function words
114 this.TSM_STATE_PAGE_EXIT_WITH_SUCCESS = this.namespaceTsmState("PageEx
355:61 counter at ${this.completionPercentage} percent with ${this.progressCounterMilliseconds} ms completed using interval ${intervalInMilliseconds} ms.`) Contains common English function words
1298:16 let details = "DevicePrepPage: Bypass download and install of agent since the page reached a terminal state already."; Contains common English function words
1299 this.comme

Objectives

Metadata

Identity

SHA-256 fd12b4633ad751e8009848ceb77791b0e98a8067478ac089b7f724ad1ba93c01
Filename autopilotDevicePreparation-vm.js
Package 11-x64/Win11_25H2_English_x64_v2/sources/install.wim.d/4/Windows/SystemApps/Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy/webapps/inclusiveOobe/js/autopilot

Origin

Source harvest
Feed osimage
Ecosystem windows
Domain microsoft.com

Timeline

First seen 3 Aug 2026 12:19 UTC
First analyzed 10 Aug 2026 18:09 UTC
Last analyzed 10 Aug 2026 18:09 UTC
Last updated 10 Aug 2026 18:09 UTC

Labeling

Label good
Label source harvest
Traits version 73866