Overview

overview

10

Static

static

10

codex.exe

windows10-2004-x64

6

codex.exe

windows11-ltsc_2024-x64

6

Resubmissions

01/07/2026, 06:45

260701-hjekcsgt8r

01/07/2026, 06:45

260701-hjb48sgt8q

01/07/2026, 03:29

260701-d2dnkaft9110

Analysis

  • max time kernel
    33s
  • max time network
    32s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260630-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/07/2026, 03:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    codex.exe
  • Size 308.0MB
  • Sample260701-d2dnkaft91
  • SHA256 d0021501d2779b6cd3daf292308fceccee009002e62c9e93977cace7d4c52535
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Processes

  • C:\Users\Admin\AppData\Local\Temp\codex.exe
    "C:\Users\Admin\AppData\Local\Temp\codex.exe"
    1⤵
      PID:1308

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          LICENSE.txt
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\github\skills\yeet\LICENSE.txt
          • Size 10KB
          • SHA256 4dd13869245e356246a5b770723247bbb80a8f07a181d1d3d873a1734297cdb9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icon.png
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\google-calendar\skills\google-calendar-meeting-prep\assets\icon.png
          • Size 25KB
          • SHA256 8f9cb22e47684c0d709a33ee6694d6c991136a75156cf6faf82ed007e430696c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          rest_request.py
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\life-science-research\skills\cbioportal-skill\scripts\rest_request.py
          • Size 10KB
          • SHA256 78ddae6460e3dd701cda67df4454532899d20851f8212a74ec8d5b6e2988b690
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          variant_resolution.py
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\life-science-research\skills\ukb-topmed-phewas-skill\scripts\variant_resolution.py
          • Size 11KB
          • SHA256 4bf0ddd6c11e0b67d72ed4334a5dd6c6dc7c1a659a4ae0964992e66c407d5db7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          netlify-small.svg
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\netlify\skills\netlify-cli-and-deploy\assets\netlify-small.svg
          • Size 1KB
          • SHA256 a2d9b9b5087c840247eb8e8360120ce9a20780c5470519b7703f49e920f780cd
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          netlify.png
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\netlify\skills\netlify-config\assets\netlify.png
          • Size 2KB
          • SHA256 519b577ccd1d2cc217cbc09fc7f53d0da2f2476eb9b106c66f749099f1a8b56e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          notion-small.svg
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\notion\skills\notion-spec-to-implementation\assets\notion-small.svg
          • Size 15KB
          • SHA256 00f5e4b758cc5c3e36e783dca2fabfafd05169c2f2175063e56d2e1fb6a55f81
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          logo.svg
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\render\skills\render-monitor\assets\logo.svg
          • Size 1KB
          • SHA256 11881710a2401d619e34239bbc12f9c87f579ac5e599e7524bfa5b57954b1b81
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          validate.mjs
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\shopify\skills\shopify-payments-apps\scripts\validate.mjs
          • Size 649KB
          • SHA256 d03cc52e7d72fc5e6faa2b21b084270fa548fa889d2367a9893ab5c72cc8ddbc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          validate.mjs
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\shopify\skills\shopify-polaris-customer-account-extensions\scripts\validate.mjs
          • Size 68KB
          • SHA256 3bf467c66c69627ff45917ccc33c74b1f5677e72aab76d73dbdd645c09e51d08
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          slack.png
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\slack\skills\slack-outgoing-message\assets\slack.png
          • Size 4KB
          • SHA256 370cb8e77d6a6802b15d9058f4eb7474f98550eaeab9cc8ac9289cba29da7125
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          slack-small.svg
          • Path C:\Users\Admin\.codex\.tmp\plugins-clone-CaOVjx\plugins\slack\skills\slack-reply-drafting\assets\slack-small.svg
          • Size 707B
          • SHA256 2cdb0fd04df241a2af8d42ec84acef4c1f4a19d355b75b196f6602c10bc12155
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\boltz-api-cli\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 8a93f2590d1054c503b7538ad8b237eddac9723c012adc7848e50cfa0bd29b5b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\build-macos-apps\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 d8d9c85281df68af2a2012ab6365b2789a573bd399692dacc4b2d5bfd06c0450
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\build-web-apps\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 7bc0085538adf72c31b5c2b42410fe699e6fe15e382fdc309cfd973c4c5db9a0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\build-web-data-visualization\.codex-plugin\plugin.json
          • Size 2KB
          • SHA256 fa1f5586afcfdfa8fa58d249fe852efd8103057d30f6c5d4009ce90e83b225a9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\circleci\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 59b9e88011f6d20ebe1f90873c0774185e0d145755fdca6838fe0c2700e2f0af
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\coderabbit\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 e6786459333514cbc10814ebae72fff96cf19ed91d58eac4dba082d36c262f7a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\codex-security\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 b9245fec1b6b4f2cc69e6e6b4ddac38d10141d87820761a7d177f2bc643892f5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\expo\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 a6e33e1afc271f069d7b24c92384a068dc7e778faf4f3e7ce8d9bf23cca59824
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\figma\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 607bf356d2cec54315a864de28fa014f66a7fc7e651836a15e46be4a23a12341
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\game-studio\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 edd750d7ab6df61834916cfc2498fd71c0c19fd9523e1e300fd4d958630e6cd5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\github\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 d409e7f8720f50708bd0b6ddaf25e3d2d77d7d0069472051246579728ea579db
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\hyperframes\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 1bf2d37cf9860b92db0d3117bd600f18f8d8fd203e78a724b42bb8ed46e234d0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\life-science-research\.codex-plugin\plugin.json
          • Size 2KB
          • SHA256 61c9346f2ca1358dcba7e4007ad5497250a99fdd5d090c9f1a7c0e79473298de
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\linear\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 dc83447f9558c9d090063b300030b69fcdda8ca93e8ce0c7bde1a84475c9d9a0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\magicpath\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 ab46ac06adc1cf5d168fc4bc2e01f57cb222ad56b0f14b52a253cd3bee596b63
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\mixpanel-headless\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 8a2c16d4c15f89edf3963b32dc76ef03cc8ead74f57cfa9a98d299ac91e140df
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\ngs-analysis\.codex-plugin\plugin.json
          • Size 2KB
          • SHA256 d8a4bc590c865a6e374b41294c8fc942b6bc78dddf3ceedec37a639c99214406
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\notion\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 b040a4235e936277c05444bcc51c9cd7af967bd2e9d02addd23dbc37bd62fd22
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\nvidia\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 11502d8e15f11a0d47b59d5e5bd1c8811925928a61938f261fd1470fde09d596
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\openai-ads-conversions\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 98798d5222547fb6a8630e6ed17ba4587811072c42032a5d044f38b5eaeaf5cb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\plugin-eval\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 72b434478d5008496d17d43b9b847121f47145f71177540ab47893b1559c5aed
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\remotion\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 15d22f6ba93e85b7624f2d5b4b83ad621518e018d2f54b5a740323a6a601e05b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\render\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 4f4a193bb490056a1594c80c3ba1c4abab9499c6bbfc3c8c71ee091a4260f3c8
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\sentry\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 94cd7467c6b3ddbb5051ec94e95e4d66e1748f4fc7c52d321fabfc35df259b9e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\superpowers\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 700bf13c92bbadecfe094ce7b8e9f2ba921e21da3ef616cf58bdd9e1e309c739
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\temporal\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 176bc3507411fd846a851f605d9e9460587cd4cce959956d04a289760868657e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\test-android-apps\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 0b5ddf8db9cd0ce0364b8fdc3743593491b7fd57cab1ad957409f46d66c2265f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\twilio-developer-kit\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 07334a49a6357cdc0548a9c7faefa9bc650455c7f8190ea08ba6b98be6a9461e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          plugin.json
          • Path C:\Users\Admin\.codex\.tmp\plugins\plugins\zotero\.codex-plugin\plugin.json
          • Size 1KB
          • SHA256 377c4de62e671bdbef30c699f1cce2f1134471bfa3c9e2e12d982358ebff8e36
          • MD5 SHA1 SHA512 TLSH
          Submit Download