File names

23 file names reported in published sources on North Korean (DPRK) cyber operations, ordered by value. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
.npl Contagious Interview 1
auron-core.min.js Contagious Interview 1
com.apple.systemevents Contagious Interview 1
config.bat PolinRiderContagious Interview 1
downx64.sh Contagious Interview 1
ecw_update.zip Contagious Interview 1
env.npl Contagious Interview 1
main_empOQO.py Contagious Interview 1
MiroTalk.dmg / MiroTalk.msi Contagious Interview 1
nvidia-rc.update.zip Contagious Interview 1
nvidiawin.update.zip Contagious Interview 1
p.zi Contagious Interview 1
p2.zip Contagious Interview 1
payuniversal2 Contagious Interview 1
SANC_Nine_KBW_Seoul_Invitation.pdf.lnk Konni 1
solana_id.txt Contagious Interview 1
systemd-resolved Contagious Interview 1
temp_auto_push.bat PolinRiderContagious Interview 1
vendor/run-update-hidden-launch.vbs DPRK (cluster unattributed) 1
vendor/run-update.cmd DPRK (cluster unattributed) 1
vendor/run-update.sh DPRK (cluster unattributed) 1
vscode-bootstrap.cmd Contagious Interview 1
x64nvidia Contagious Interview 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.