Kivun_Terminal_Setup[.]exe

resource
Kivun_Terminal_Setup.exe
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/KivunTerminal.exe

Kivun_Terminal_Setup.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 a0eb2651cc3b98796df803c9cf8f57aa64e90629fd168961ad07c45ba2916364
MD5 254d3d10a88e3cee5e9e55db236b7747
SHA1 ad8cd46353f8e11233e1c06e15ea304637c8503e
SHA512 0391bfe6c2492a79a020e4991586a948c73d5daa388d201d1a718063e043267d2d075396499e2bf9013cbc65bf01ec6dd3da6aebf8bb2e113add2579d603fae8
SSDEEP 24576:2yWZelQBzaiRb4vMbwJzGyc6DLv/rzWX1vrBtXO5Vlh38vIO6NM/Qs9hc9Ll21Ak:FvQBeiR8vMbwJDcILvXm59tX4Vzaj64/
TLSH
T1E55523A6BA408925DBB30C3057F176E13AB61F628DCD6D07EB1C3264F93669C680B259
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
MD5 6d08f0d5503bb100b8429fefaad163a6
SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
TLSH
T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-header.bmp

SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
MD5 940c56737bf9bb69ce7a31c623d4e87a
SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
TLSH
T1D312A8869D83DC42EC4F7F71E3E6A05320E0690A052FBAD56F3634D6E65F88B672410B
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
MD5 cf0351a2ab9128838be6b54cea8238d3
SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
TLSH
T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
MD5 c953dd0aab774f1446fcd63fa7c5f613
SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
TLSH
T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

CREDENTIALS.txt

SHA256 4e1c9205f2af25785e5f2a08f343decf7f4d52a0c9f318ef78ae0ce6f26217b4
MD5 b834cc80df4d46dac07adcd955304a03
SHA1 1fcae30e4a4de5e3af01797b8ca6a5b55b64a691
SHA512 dc6a9752aed97782cb620b552d32ee05db4e9ca485c9c7217317c2ab596e5cf8915d085b0c145978ef62bc09145fc9787cf797ac3312dbe8ee5bb7cd0360313f
TLSH
T19B412E1B5E8A83328DB1D416B8137523F325A367212E1820B2BD864C27FA342834E35B
MD5 SHA1 SHA512 TLSH

KivunTerminal.exe

IMPHASH ad3bd59c67439e7060539e81fedad408
SHA256 bea06c36a8d4397454a8dcfe7a6ccbaedd8537ab9cc8af417416c89117e0c01b
MD5 0b6f3fdbec32889cb8f51ff14b9c1470
SHA1 8d21b2b63dd9440e6529508bf430f13f62120c71
SHA512 dca3c2a4083cf514a8be8f51f611dd1a222f07544d01d672b8566bdafbddbe8d23814f8f6b8098168843f5c2f9224709aa4fd17b0230a73d8a4e26c54febcad2
SSDEEP 3072:5X5iOhyOweJrhVQ6KB06quUGWc6vUpuI8s5SHsw:ThyO1rXKBtquUGNpS0
TLSH
T152F33883B2A521E4E3338D388AE10515A7737D360B685FDB13983255AE33ACC5D3BB25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

MessageBoxW

kernel32

FreeLibrary WriteConsoleW GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW CreateFileW GetFileSizeEx ReadFile SetFilePointerEx CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess CreateProcessW GetSystemDirectoryW GetModuleFileNameW MultiByteToWideChar QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetProcAddress IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode

Name

.text

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

README.md

SHA256 b50626e5d6ee8d6e54380c737332241505db1198eabe95eafdbc7dd56054cb9e
MD5 4b03416731e537e92d9fee0fea264f49
SHA1 ccf3c0b65c9ad8d7df0daee0a8454dde511180dd
SHA512 10c61e0b4fee8ffde8643e2e626819feb5169034427380ebb2a939dc77afb1caaa307f7cddec4c1b4ce93bfa51bc1a5c8e268858d857a8bfd846d57eb740eac5
SSDEEP 192:WDM4tUXLA2ngPO1QOjpnygV4sFMslssLo2C6qpCt4y6kK:WXI71RngsRljQ6WCtPK
TLSH
T1A5423B47A519537B0B331193B24E76E7F333C539534A7928A838510C728FBFA835B699
MD5 SHA1 SHA512 SSDEEP TLSH

README_INSTALLATION.md

SHA256 bdbc7a544cab7c6241015d24528755715065162cb497f769daaf72cac966acd3
MD5 3edd3f8fdf96b1cc240ee6cd3b4e45c6
SHA1 39191ec5ca4a2d85feba0f49cf0c3ef7e6566ea1
SHA512 0f3074adaa5c727bd4e4bf2cc0ebeda7f9fbe1824801c7fbda2f0cc71ac222edf686b5ef3ecab9bb744b7044ec826c6af52e883e66d55adefd44063d2813b85c
SSDEEP 192:709pTFr6CYc55qGx5Cr8oXlItPIWVSYvV8kW+O:7WpVRYc55ErdUxza
TLSH
T1C8D1D68F4DD213372EA101D3621F77A6B317A578E2425434307E512CA3DE762C357ADA
MD5 SHA1 SHA512 SSDEEP TLSH

SECURITY.txt

SHA256 a8f0729d5ba9a98ab5a0b62f3a419b7d11a819d0ac7fef490fc355e51d796009
MD5 eabbe55c902be5e4acbd4d8714e83afb
SHA1 051b86bded520f76963a5f38d64e7fc06deb444c
SHA512 876fa67de6ec873357e4e735d7c0ca69a95ad93a6f7aac7bb54da2155d8d1364104374bfd1137291074722e929fef9c82483b480030bc991fc53dbe0d3d932da
TLSH
T1A781F64BAF8883324976C285263E3A92F323217A61066D513171424C33FABA6C37F2D7
MD5 SHA1 SHA512 TLSH

TROUBLESHOOTING.md

SHA256 c9326598d0bfdd8862e89c32f5caf7631373d54f964791e58066add29173eb75
MD5 da7fee94116380937a297f449298cc9c
SHA1 ecc9c100ed64cfdbb419add105afec10c16f46e6
SHA512 4072dfbd33dc619dea2e8cb185e4552f06365c3ad95b74cdfaf1486b139a801f51c5604486fc3bc1c8df145c9231715975f3d918208f53f2ac9fede7f4133c12
SSDEEP 768:kaEAufdek9qfogxNSeDRCqaGtLOnG0OIJG:7E0kUAWQ8inGbh
TLSH
T194031B0B1A45133609610166B60F63F3E712657C225E7538B0BAC25C32AA77DD37FEEA
MD5 SHA1 SHA512 SSDEEP TLSH

VERSION

SHA256 963fa002868e4a1f02f16524359d2314946df1422ea2c0307bacb7ef4956a987
MD5 c426d60bbd16fde6ba66e774039343b6
SHA1 e3044bfeaa17fb1d682a505127a8bec03283c825
SHA512 bfed4705a8eb0af3616455c90521e0d3c85a1dcec56910831419c861244fba959309c3c3e0f42309812d959878ee991cd2fc26561b819fd77237d2d9ab1f63f2
MD5 SHA1 SHA512

config.txt

SHA256 73bb99dd08178682c39764d2b8bc282c5edbb54432766963391d694e4fb836f5
MD5 21df0ff900424a4a4190a2a712c9e680
SHA1 3f2b00e2a78788d6e5db2d2866135c68341293ef
SHA512 eab75419ce2d3d5711d8eb9a8043817d357dd0af0ce28ae8b4e800c24a71aa3e49a2499505d4c14d363820af8ccfdf5a99b43cabe47b3e2ef5f28f63c39dfec0
SSDEEP 192:AbefQIIrVe/9mw2AWEDUEBxHoD6Vynii10E0dcxNkn:7jIBe/V/WAUEzImVaP10E0dcxyn
TLSH
T1E732F9526B83527115324083378F66E2FB36D5FF5333345074DE410C63BA71A926AABE
MD5 SHA1 SHA512 SSDEEP TLSH

configure-statusline.js

SHA256 3ef3d6749fc0b76a28b3c7eff6bbb0655b1a59a45498b69a9bd9134f83790255
MD5 2901724e2f2323c266967a81f4afc212
SHA1 451921542778f28daf5d4df9da0658e4b570c204
SHA512 daad4fa342c5482fd52ddf00f51ed6d2b7f271be207a7fea8a564db1d4b842141c70d97c9cd3fabf120a741f6eea91d642ee16e9baf778fcadea0e3b3d8c3501
TLSH
T15E418902C198473A4DA41660E75D01A75B2EC7F623547AB0C27A904719C5DEAC077BDF
MD5 SHA1 SHA512 TLSH

folder-picker.hta

SHA256 0ca24f82ab83c89a8b693ba996f051a697548eebf1d8b2b9ea0eea6490d300dc
MD5 b7feab5508fdadaa1b6306437c83f914
SHA1 c1ee52a4cb499a11814895acf8353192ce587c20
SHA512 5106f20471d9c741d1e6c3b5a9f67d59b85bb1388b1f98f616edb9152a37fe50756d5ea91557b4a23c1a316d8ce185e6974ed67d4f11ce9cea780be4722f89a1
SSDEEP 1536:W0m/73eOFt5RC+NI8yuhjKyE0rwJU/TKHRbxvTNxi5WBM5taZ53OY:wtxKb0rszTNxi5WhaY
TLSH
T1D353E727A94805727973B6B9AB9F6216FB7682135301C21078DCE1491FB582481FEFFE
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

folder-picker.wsf

SHA256 5d984d8eb597e006ad7bb12f29e8c7d16cb7aca64f5768460576b798650447a8
MD5 cc330394c3e5d6809712e7e9d9e81a93
SHA1 79249572956b5577d2eb903a5f3ac870a4ee8984
SHA512 1fe6f4abd0b4b24b7b9d03f49661cf31e1202f0a1f9968ef38cfd6cbbf9bc483e6f5ed176ab557341ae1ed75b9d0248a4f4e43486452071545a8af3405427493
TLSH
T1BB61E9422A08D33245369643034DE795FAE7C6373B1AF735348CCA842714AA95EE0BED
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/README.md

SHA256 58c58f776f6b143c279bd349c8b7118c719774008f5b1b23af5aabc188e06f6d
MD5 3670c5c4c4a2ef8fe57976b2fa91c7f0
SHA1 582a8a26ff298ad47e9ca8186e6ebf15070ce6d6
SHA512 dcf5fe1dd897b214473ef10cd466f529365b31901824612b71345b2be13b0eabc934ef89e08543eeb874d4651f2bb08d682ec96899ca5d4efa873f6cce2be190
TLSH
T10C81C816510773750AA722E1778F60B7E725D1F83319246A34BDC28EA30E279877639E
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/bin/kivun-claude-bidi

SHA256 cee184d0aea62a77f66eb2b8da7e45a874e23cb8776a4edf6438f6e1e637e762
MD5 6bdd790f1323692f93786600234e8960
SHA1 171fa42567dc94639f68a1f306aa5b0d00357baa
SHA512 9fa349cb5ab790b6ae5d6c898de8b9c14ede5c789f93c822dc57b0d5b9bf114eabc0e98e3eb464f00f8946990bbdd8d85d3539800894001ffe2c1486753b3367
TLSH
T1353145419D0833361BB052BE670F9236EA7A90366321475174F9C3892B651EC4673AAF
MD5 SHA1 SHA512 TLSH

linux polyglot

kivun-claude-bidi/lib/capability-check.js

SHA256 a213a511f7e4b282578e75ac4a11f26e00c06063b16b9f42202cd9f27b3e3e72
MD5 696fdd5ef1759f6ea33d1050d767983f
SHA1 24c950e49bec83a0219c4d4c8857e6e6f9c19657
SHA512 d18a5b8d23fe17d48f231289c6e18356409864c7e3e7725501fc26c24be6c8afca4160e5ad1bea13b75775c71d89ed54d20c66d9c854c175208ef8d1ccad16e9
TLSH
T19D01C044E887213017A424E1968B505B29FE5426276C5D76C677D2893F022268377ACB
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/lib/detect-terminal.js

SHA256 4c3e5c66858346f8702569e00067d2505064499b0713bae4fad503b48ff696b8
MD5 80d21056fb4032daaf02a3866fdfdab0
SHA1 dbdc724b7c87c2b64c5e5b2a3125ddba9d07b081
SHA512 5ea3f4f950b06cead6852418a33a6affb4dee100118369c10c5b6b019d73c9f87cb4e55f4dd8fb2e10e7d5ebe105cf57b314cc8be5339bd1d410f466a61c3246
TLSH
T16741C6E26EFA3331014212F5355E612BEA92A03153546610F4CC420D77BABBC6AB67C7
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/lib/injector.js

SHA256 51161461ed703f403a8b19178011ec44a7354d26375258d9ecaeaf74be278e14
MD5 44a086ebe778dbe35d6d9a78962850c1
SHA1 7e0622d92e8d4b70196ddbdd10487a64bf44c858
SHA512 8bfb58f11e342b61428710f38b54fe92c688946ce557fa6ce73cf4cde99810868481beda46d0ba62198cf2e58302e2afcd958f129b7adf857a8223f1098ed5ad
SSDEEP 384:+6lk832AskmbhFg7AtDzU9UZgiVkQ8OZLZxITJV53llFTZvBjciLyIuxX7P:+6Cu8f9ZG39VVMb
TLSH
T185B2D7AA27DB1235461330AC5FDFA1A2A224CC1B3107D568F86D93CC6F4A9748271EF7
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/lib/resolve-claude-bin.js

SHA256 60ae680d6a9eec37c8ce6dd79a163e878f7c0289782717ef9c3b6fc68bdd3325
MD5 8085dee9c9318b8d08e506958df2ba34
SHA1 55821723838c416011c0e9d9cc134b6fc985f4e4
SHA512 70a125aade3d18041781f21adf5c5bc2e2784c3e9ed681e0154a071831d9ecf61886575fe17c7f9fca8e2b6014fb86a0dc7db8d6ac9d70ecd1ed65937455d38b
SSDEEP 96:TwqlxZwIvfl3/rcisiYnxYAzRcqLs6AOssHpcokVoWVAwDNS2Crv9ljxp70:Twqj/o/Komqw6jsCcomXewDNSRrvr0
TLSH
T16DB1B65B369B633A009066F45F9F20A6B313E042632998D4B66C83441F8A77D02F99EF
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/lib/rtl-cost-optimizer/detector.js

SHA256 87fd848e20f39b8217f801e75447b112f138748eac445f1cca6fa65a35566380
MD5 180f3db8477e1832f82e06b19f477e98
SHA1 b538a2dd69196937948af750e4858309c29a2873
SHA512 4a9a1ff28fde2d4c2e6c762df6849758a15fa545cffbfbf85995af3e5c5087d77be73d13a959031fa68b0c9d2f18d39d81ed1648e7bbc240050aed1202288dd1
TLSH
T17631CF0575A36248065A36682597DE03F21C8092A44AFDD07FEE97C02F8A47ED37525D
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/lib/rtl-cost-optimizer/estimator.js

SHA256 1c684e9bc428c6451390a8801bda8ee2cd8f385b92fc5f56d5f4e5950cc38153
MD5 16a456c802203dc523350ef86e1879e8
SHA1 7a16add146e5d44d5ccf55967e393add355fba4a
SHA512 0d5c985c2b2eaa26a84d0a74b3c86f31ec8b3128385e572ef54df5150641eae820b5c83dfa18bad557135b47d90af02ffe9715e0406c07d1bf7e82376b61ea48
TLSH
T16A31DF4D269524944C5621B0AFCBA52893BCC433201EC8B6F9E988CD1FD011AC2F398F
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/lib/rtl-cost-optimizer/index.js

SHA256 cf89cdca82cff325756bc3840fd818b2eefadb214da0742a7944705899419bd0
MD5 7c01896243c2ad36263c50dbee99c2f3
SHA1 ec4b646334a727b69038627dab0b1df507319d04
SHA512 9d15fa6e665c9d0d3a3d7dbce932644a7da40aa0a1705b9b84a97f26279ff0d1b521586b16db92c11bcb2db492e9189be26ff0bba6da7d513dc61d668a08f29c
SSDEEP 192:ZUm0A4be1kMvJLYkYLY8sZQWNn3jC+QaUIVoNR5aC9aQe9:ZU1okMR8NEnus4Iu5t9Q9
TLSH
T1DEE1D6967EE63120551231E59FEF45B4671DD123621AD8A9B95C88C84FC207C833BBFB
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/lib/rtl-cost-optimizer/normalizer.js

SHA256 aeac777eb7a36226a305b494e57055c3f65deacd49a32cc9f44636670c9676f2
MD5 9c0fd02e9ad5713f6d026720670e7669
SHA1 c88597e352a767b372e83d24b6e153890192f9ff
SHA512 b9b5650da3ae45cc983667c4f354ffcec5d2e9d287ef280213031c02f9e7a67aa215abeb9de6e8e0a4b1d456ebbe1894970e7c712216e2533b6f82fc26f7c367
TLSH
T1AF4165857D6A16B88652398829BFB0C9312942B3B084D438B95C438F7FE6435CBB1DDE
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/lib/wrapper.js

SHA256 e8a9a4bf659af7582a3d38918bc7782e294ddb3d418d8ccf8a59e009f4845c6b
MD5 d5fc3e10af74d42ba499f79e5926fa94
SHA1 fab006803d97ccf40b4db8f454a368b5eff92ebd
SHA512 ca455084490e59d04130adc6e4009ab287fb9c164bd41a80e4e3113b55e971e0917a25e583a3e764b915ed24786d14cb2b91327ea51045b0dd530766925fc52f
TLSH
T1B281021A74B6225512E36579A38BC43773368003F609CAA0B69DC1885FD667853B3BDB
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/package-lock.json

SHA256 c229a989cc80ca18d4c40cfd683b122cb0e13ea158231183d804b999877873c2
MD5 42642c04f7efaee8d27849c1364eb729
SHA1 87c5d0e14eb091e06883bb4efc9f1d5bb4b7f4bf
SHA512 348683db68c3bdc8688c3d95346dded6993f43e679b088915490e0fa7b7a8044fe6562d9a535d9f6e41961a336dbf8a54e154d1bfff4a551b1a91aa634a003ca
TLSH
T13921AD0BCA102EB30BF79BE19C265309F605062F14546A0BB5BD2B9D0F3256224C5E3C
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/package.json

SHA256 b3414d65e858d2e62b18040a7db63b4428995d4070c7e4f67cfb40a00af48cd5
MD5 b579685924e28c76980eec6e5e6925c8
SHA1 a1af91afb2a02fd2602c685784ce3558995392c9
SHA512 19da25c89702c2e51b52e48f53f5c4de5ddb438cdb1724ff94aa70a189d224c9c86b53933527dcfccb5eca4f06e06d1509e6270d29906aa3f621ebb79d79859f
TLSH
T11CF0E91588956AB311F9EBB62C1D132AB1608A2F00345C1B71F7514D0766253189BF7D
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/test/capability.test.js

SHA256 3a8f738ef80a523fcd43b6adc96cce14416638a5e39f288e550216c8665bd265
MD5 8b7c64d96f03d536f76dc93979f31882
SHA1 bef73a7c0fef1a9af36a5ad010dcbfce054d6bb8
SHA512 9d658ca0821624128f18f3a2ff4a22ad6732f58531520bebe97eca54ef10a20396cb71295b34add3f8d9d6180e07c121c8fa78d1e4e05200ab8fe9add77d6d41
TLSH
T150517B6D68F22134C9BB22EE7667950F29012567D140FED4B2F552103FC93AC89A29FA
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/test/core.test.js

SHA256 dae886c292fa6576e8c53ed1c7f70cd896b4513e882584855d5776599d4c2d09
MD5 d33defe40a332ff82b92a53bb4aadc31
SHA1 87b776fd8348d99491b8a45f8b3321e1e5591c61
SHA512 ad55dfd8574a35da61c20b7b09a6bf795dbc7b5d9510d1d3109be87dcbaebad767c35b26efd220a0e43b5e82b8a1adb3c10cd5824419cb0a96cc22a585226d37
SSDEEP 48:IXNSp33i5e3e5sNaOfhhQlv+u19VxKWcKv95yk2+y7QQ74qjmHve1f68S61YlCD:aennTDZUDv90k2UQIHveF6B+
TLSH
T10A81420E66FAA1A002B7A0FF6BEA995C310290425385EAD877DD22023FCD3ED5D71575
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/cursor-forward-rtl.test.js

SHA256 ea6749fb617c9e42636849e873700d8735dd9d328cc474c914baf9bb0a94b325
MD5 76dfeca4c5269439e84043b32185f502
SHA1 0feaf7b0e1d3afbbea1c1e3160a4b44b83266e7a
SHA512 2865069d58962af84018c413b5008d17b8984aad885f1e007077ce00c9b95548411d2a1f09d623bb33080f5a7d102456c6be5c01b02a6dc581b82e6a4f13cfc7
SSDEEP 192:gvIFHhq0DS/ygG41nvOM2H1AmuDGyGCuof:gvIFBqfyf41nvOXAmuDSCuU
TLSH
T1C8D1528E75F785A1013352A6AFCBE46B6A01D4532041E5A0FBBA93053FC929C4B235FB
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/dump-raw.test.js

SHA256 1798598adff467bc9610777957b8ed773e840ac95c03a5561512d68499bdbe84
MD5 ebeed6f83b5ec8f61fb296e10edcb4b2
SHA1 c9824f0d2461e212345bc8c7f646eda547c19ba8
SHA512 6ed6a6f49009cdeddbe0317317c6041cbf5d76caadeaf4078930bcc8ddcee22791bb9f5767a76672052c97fd4f5b4776020ba005634a9f17d8090967fab66b1b
SSDEEP 96:MwpEOPvni0iGULUGHyX0xCFen2erQuBFVm3UF69FIx1T6TXBEOSjF+1:f1PvkUj+2sXZGCjk1
TLSH
T16BE1C586A6E31550187362BCA34B802A3534CA0F7310D9F478FED2253F96B6C17AB4F6
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/extended.test.js

SHA256 1d7312f46a6ec16237b911cff9f51677670e67f9c4f33dfcbf80decfbdcba1e3
MD5 0e6d99d6907de66637e330feb5184162
SHA1 7d45eeca72d8eede66b17c14ae7a33256d5769ca
SHA512 60ee05994a506ccf6c5fb03d24e7d292b3192b2a3972c1ee4cafcd0d12e0f223376ccbf7d52143d1c0113ea3a7b10c88a2ca9682f1ba41191c0c5d92b8d345db
TLSH
T15651550B69F5812202B721E7A7EBC55EB10290866380D5F87BCC56013FCD3AD8E72AB4
MD5 SHA1 SHA512 TLSH

kivun-claude-bidi/test/fake-claude.cjs

SHA256 685f9f15f3719504695989b2efda6fdf32974d0ae4cfdde87a3df46b1c7870b7
MD5 8691f940dfe48ae9f4a4b1455f2e37be
SHA1 872eaac047a7a38974c43ebcc7451cbafb648fb3
SHA512 1a6917e206a95b834c10982ba8e2b3fcfbc14717891b9dd769cfba5efbecd94d40ca7d0b597179e1f3e262e1cb1a01fb87305a21fc220cafb969c84d5f920f05
TLSH
T19EF0F20690EEA71856D815EAD02AD4A678E9C020CB10FB7C1687E02D7D8686E0805BAF
MD5 SHA1 SHA512 TLSH

linux

kivun-claude-bidi/test/flatten-colors-rtl.test.js

SHA256 ef82b26a3da9d9d0285653dcb7dff9167f6606d0e8b32045a6eca9165cf32b33
MD5 72d6d1c50e746f4024fe2bc74edb978f
SHA1 5035515074c727017db6dc7cf6a44a3bab32a1f9
SHA512 f79f4b00d5be8cb8d2eaff783d2d2f59926bdee4333666214be4d8364dc240fe7175cfa2c9225e5d4a292bc371ea823052c1e05994fe8ed868b3a8581f2556e9
SSDEEP 192:1p+DjPHExzPDHLUFA2MYgBk7ERovtSS8s3WC65xfk3ehU1s:1pkPgzTLUFA2Mpk7ERiSS8s3l+m3ehUG
TLSH
T1CA02724A9AEE8130067356E7779FA8656824A05B1285E690F3FD63023FC53FC88635F7
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/ltr-island.test.js

SHA256 2a557b2cbfddfe291bdd427b3e95fdde782efc083bda147838e73706df48ea03
MD5 b2dc5211adfba084c8939b5da92be7c8
SHA1 d46acf6c5175a425ff063fb354f3a3e0a8d9b12d
SHA512 cc1ac243fdf39a8b8b9daf95890a77f68dccf83cda85618f5f0ecff20b95018945926a77f197526f0f9b64d0d5c1a78ea721602de26c6b5b662231b9825269ec
SSDEEP 96:d4u8ZyD7i6ddoSuGAasoFhte8vj+j4zJA65zt:d4LZyD3ToXoFaNj4Xv
TLSH
T1E9B1931A36CA13610DD300A87BDEF469B51191964296D64032EF83453FE9278AE738FB
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/no-bracket-rtl-runs.test.js

SHA256 e99cf5a1667296135d1a1cb320c13fd80ec4aafe5765250c51d4cae3c0d6b38f
MD5 59b4ffcb9cd3247e89e0805bf34b1f92
SHA1 e6630daae028cff86cc56fe0566ce70579fe65e8
SHA512 202d71ebae4bfa2c0c5e4b708ab56e012179e3962fa24320deb0639262dbf7c738e40185f109b86aa262e920a6e62103f1f19775ddef5d644ee01b84a1529ead
SSDEEP 192:XBZLoZUGYibht277Hioj0qtgX87ojSFiSkC9KL1n1:RNwUNibhtIHiqPtgXUISFiZC9Khn1
TLSH
T142D1724947FAD154017321FBAB9BB669362491032282C6E0F3E8A3413FDE7B849931F7
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/resolve-claude-bin.test.js

SHA256 2423e968758a87454ed710f9269d3f5f243263080a6d348bc910e0d840583a3f
MD5 2231c38e28534985b29b36bb5e4465e1
SHA1 672e163b625200eb9e231b991d43163555a337ac
SHA512 66af31eb69d325201b1c5cf134466420443eefd452f69963e7f729a7a0d9762570d75f642358e1f2989174f98b5e33204aa437f20a6843d08b1250c73c9cefe0
SSDEEP 192:UZEHlqhpqiGm2duyksqi2QkkY/LksYoPkkYC0:5Hlqf/NsCQL0Lr/Lr0
TLSH
T15AF1738B13B3233848F2E6D91F9B516A2716D2433286F998739D87045F8172C97A26FD
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/rtl-cost-optimizer.test.js

SHA256 93ae3caa078b24e51cb42962d4fefc4d4a5b87e24e67e99476e1cb48a78af5c0
MD5 244bf19b8d285e40cb6cf04df3b31c38
SHA1 da461f39c19cead1f1905e4f458252289e85b5d6
SHA512 d89e4ad5f77ea851f56f49be6165699f51bc76d8d955e36ead3ce8565f656d2b8c148e6277b231c569ef2e72eea61396198b044b3eacb0e9baab1ffdc3c39f7a
SSDEEP 384:nJIDaVQYqJVyfD+r6M+xzz4p7ROkxOVm2VFJVRR:nJIDaexJVyHeROk4w2FJVRR
TLSH
T1FB5250546DF506140076E1EA8ADBC5BAEA29CA067107D5A1D33C4446AEC62F8C2BF1FF
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/smoke.sh

SHA256 036c3ea34e14d217b71b1f0ba6c522e2976665770db68160f7225e0fcbb9ba72
MD5 06ab5aacca3dfccd2d86299e4c3b22d7
SHA1 21dedbbcee34a0be617f681c8b7ca8b748318f0f
SHA512 abd80f903b9b1c7df05380925c0abed16119c2b55060ab1cab792916a17cff45123784faedff3032de8104759f73a73cad17c874c36804e32f5cb701949ada0f
TLSH
T1AE41E80AB5C50E7419D200F2292C717A792448660B057D9CF79F70DFEB792B0A29FBB6
MD5 SHA1 SHA512 TLSH

linux

kivun-claude-bidi/test/strip-bullet.test.js

SHA256 eb57f61ece7053ec0c609a7b1cfbc103cf3ce90b27c168282fb236746c74a349
MD5 8de98849d7b78a6f5f419f9129cce474
SHA1 d7f1a2538df3531a007a15bb54aaeed4cc3583b1
SHA512 d3d6e6b8b457c86a089c0169ffcc54f61c88075bca083414c306621e454e14702a07aef2497e495efcd459faa96fbb264c4095ddfa4ed9f740c30c7c240ae729
SSDEEP 96:HM8P0oloKNH/gE1miGpfrFxrAfKSn1h4d59v8A7Fdqw/ylg4Tb9Nz8Q2:HMC0oloKNH/gQ4j7S1GPFqwalg4H9N4P
TLSH
T14EC1734D27EE82350AB350F2A70F62D67114C45A5289F694B6DA93082FC33ED48635FB
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-claude-bidi/test/strip-incoming.test.js

SHA256 31e3a31c5b6bfa930c416102510bee39b83e59662070d1c63eaced3041356dc7
MD5 a751e0387b01dc7e47ceacb5646bca60
SHA1 e64905d5ff54924697daa832374de5e605990b0b
SHA512 bab41d280c47185efed9583282b2c3ab41df4971216f342f9affbdfbb95c3697e65892e467c9bf269527174e819d27a03fe06ed2c6e2310887442e3ea24854ac
SSDEEP 192:j9pM9V5K9idpc3JRTyTUPMdwi7+jk5tHN:j9K0icJRuTU+V7D51N
TLSH
T12602D74642FA6220303BA2ADB75F50197535C0636254EAD074FED2163FD2BAC83739FA
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-detect-distro.cmd

SHA256 fde33d3cebe4f8bb688c27d581794916818ed6768958a28c4e8517a5f8c36aad
MD5 f500b06f776464a80d198264a132de7e
SHA1 46b98a23e9ab2c3b78d905a35febd0c73e024531
SHA512 0ef5b1b09fdfb9181253bf4a1175ca31ccd4a9848c9369277b959a9517f95afee8163f590cbf700e2c546d84cfb164d36dab51a7f55b4bc63ed50c32c916352e
TLSH
T12F31010749C4122204A459BD7A0905A6775F90752A21B2EF3488E1EA7BDFB0F937A1E1
MD5 SHA1 SHA512 TLSH

kivun-diagnostics.cmd

SHA256 515381d4bd874f6e6f31fff23b96df5c5f0a47687e231d66e6e477f809362ecb
MD5 89da76b994e7a97fa9e4d6fc652e93fa
SHA1 577def906270d73a2c960447220aabdb79ca56e4
SHA512 3fc88c4d84e760e88c7ba92db41b3b41ab51ff4225f5e3146ebf71962a65d15eaccd7fa0b2f2108f3010f1d8cb930dd060da2a19f81a7e1fbc67e8d39641e631
SSDEEP 48:SncPTMZvd+C8lqo2b+vNI7JUHZKoCFHGQmQGj4NNtGv2vBSMzZUWGTJYHOgXCz9P:noZl+C8lpnxgGUGjWG2GJgOsEan/EdTl
TLSH
T1C6C1519770DDDB3000A94BFBE70B91C9F326205B5B127D5D64D202753A8F38B3AAE981
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-direct.sh

SHA256 d549a40a603dcd73d1fbdb80c98f698a40238b58df48f8d910d0eaa2a80fdaac
MD5 c15a91ea897f7de12601fc5e80310267
SHA1 a4008ff558fbe63da71981dec13d04bf519f90ac
SHA512 813d2748098de9b7ec835b57d8f309bd50e3b2bc983a8938909620eb9b97327f6e03123d48eaa5549969477cfd4683296173c4bc2d95a54a9f38882a5084a5a3
SSDEEP 96:3wuS5dmxpfrU69fglwgD5zT3bjYIX/qKFVgrRBe6mL:3wLgbf7Q53LhqKFVQRU
TLSH
T180917362B449A37306AD80F21557A25A3708553F091C392A713FD290AF59FB837FE3DA
MD5 SHA1 SHA512 SSDEEP TLSH

linux

kivun-ensure-user.sh

SHA256 a762fb65c97697a92f958bb25cf6716a09f6178dce90c02e1465e17c10ea2a05
MD5 fd19abc83d9c4a8dd7c6f4a97d8b21b2
SHA1 5530b817e932f0bd5d9e8e33282e20602e4718cd
SHA512 e4411ec8f896f8d6d5797af3302c2fcdc453f5e2ebc57d5f79145cc77dd9f5dc314d6ccf99c83fbc5846d9e2ff1db91e8347611fa5730423eb69091da6c92414
TLSH
T1722174A3F443D2320E48C2A33D6F4574EB4B2AE82129B99520BD4448F01D5AC122BF94
MD5 SHA1 SHA512 TLSH

linux

kivun-fix-display.cmd

SHA256 ff70467a4252f6cde52a9d49a05112f3fecd068eae7aefcb5e09e862cb9ca2f4
MD5 ef79b0a5508a0b5a6c1fb10e78a6d824
SHA1 bccc53451e1e7c1abfa3f6e33515a74d1e5a068c
SHA512 17bbc718cd9d8125de1fd3304b78d373254e90d65ac8f4c192cd1c6e9926ea8481689237cd9b51e57023108b560f85d0fad34f63770d6f327b24ec0b390379de
TLSH
T19131B18279E0C21185A007593F3A76A7BB0315BB7662AD0D149B12743A887DBBA7EDD0
MD5 SHA1 SHA512 TLSH

kivun-icon.png

SHA256 b22ee8effbc52a709c6186c3422f5244e3d923e53b1982d9d8b08de8727222b5
MD5 51d883e94926249062d78631461a6825
SHA1 9d2fd4bb796e569e103545804875e5b3aa56895a
SHA512 1b74c76fa8e130cd6e47719ee8dfea3f7b70d93261a956ba9898b23c0cd1b88fb694ef95c68536b7e2965c35996233a07293835ea53c92294b8e42cb8f62a113
SSDEEP 3072:3Hg4eLPXjE2nOq7gNP269pP9hAV8zLm4gfa/ag69MN:CPTfnOq7gt2CpVhA865faSg6u
TLSH
T11FC312DAB90EF01D6BB74D70F004B19968D822CE8A0ED196FDC542F73E09F29CAA5156
MD5 SHA1 SHA512 SSDEEP TLSH

kivun-install-claude.sh

SHA256 9595547633508d62741cb19bc9af2358549249604229676e063a59329f7f8ec1
MD5 ce2452f9109b964fadc09f5880d4fc8f
SHA1 289c24c563f2b9fa55215d08ae860e9a7bae482d
SHA512 21ded966f635d933ff10a0a850f6291a45f84ae4b022df864e03533a18bb5c5307f74f134739ed31d1f87e0770d1ba9ca2009adc4e08e783a60bbe8d7270580e
TLSH
T1C611971A290513751E9A82CE282380FB5791D922323839B0B1EBD2B6654F258ED0B6D2
MD5 SHA1 SHA512 TLSH

linux

kivun-launch.sh

SHA256 c8c58d7089f014ace66ff2bdda66df97a7d2e7cf3e625632cab8af83e792a55c
MD5 0207814dd823c8021e1c33275ed62d37
SHA1 9ab8966f898ad5018d75e565a0546d4bf54099b7
SHA512 e95ba2ad61c26e8c606824cce1dd4c2028a90391fa5985b8c17d16032a1b3535ed448861a498f6c1ae5d32f0f54397b4ce8ad396a8043ab055133e56d681bb0e
SSDEEP 1536:3nPuqh7nNIl/mAd65nOLVfRde67gir9Kd:/ViRdZ9Kd
TLSH
T11D6339A37A585336393A80FC5B8F65612726013F66207968703F916C3F2837B827F6D9
MD5 SHA1 SHA512 SSDEEP TLSH

linux polyglot

kivun-repair-updater.sh

SHA256 e5bb2897692d964fa2f16d189a76f44191c2959e16cdbb9b6bce181bfe453196
MD5 7fa3d1325db2c87861a2e91fdada46aa
SHA1 cc518807de77bd67686cfb1d029b24540458b07f
SHA512 65c91aaf9ee32067686496aab3367776dc2b9ca0941745838ac322c74ffd0505a2b8532734c95bcb81ac2c8fdf90f64a652266c75470de823e128f12c2060975
TLSH
T16E41B80A520A23B28680C7F6166F93625794A1781E05362050FFC319F00B6BD7FFBB9E
MD5 SHA1 SHA512 TLSH

linux

kivun-set-icon.py

SHA256 c30dbbaebc89d219e07a1368c7e6280ca92c2016f9a9a092a966a28a11dbb5ca
MD5 8c258be47bb2387084f4db31ac0ffdf3
SHA1 9248904ab6540e90d495f15fd55ef760d0da0f42
SHA512 350b8e91d635c36ce39fcb68b2a413100a19bad1d8d764ab6cf5f264bab409801abf866980b356ffba5e68aa3b87539c003d516fe186720f63d772fc0715842d
TLSH
T1375181535D36A232E372C458A94AED60D30E446B8B70B328B76C56016FB5097C3B87DA
MD5 SHA1 SHA512 TLSH

linux

kivun-terminal.bat

SHA256 7f943aeb89089465e3683d31ecba63c5133c8560cacc9ff41d869390971999a6
MD5 e759638e2bb63779a5eeadb31e38b59f
SHA1 28b0f07fb0479f9c930a63810ef2aa6a2529864c
SHA512 127dbf1ae20132afad594fd0e8449b51fe23006540409aec8d18d1b084c34a4776cf0e1a18ec2ebfff8e0cf821e9696619f9650b85b8705410091b9845c273d5
SSDEEP 1536:a6IIsTSyd4kl0WokRllKzKRvkKFivMRmD/TkHWK:2IFydLoyllKzKRvkYivM8XCh
TLSH
T1BF33C54A25D4137658B087B27A1B45E3F31B80666324B2BE70FF820E674D71D17BEAE4
MD5 SHA1 SHA512 SSDEEP TLSH

kivun_icon.ico

SHA256 1814c638e93666040f54b479f14d98cb8ba9e17604f58b425fd07729e97a04e8
MD5 44a8573178123e84af89bef31b0a1564
SHA1 cf60fbaa235f79181e9ae554a2103db79ff28188
SHA512 61e7e2ab1adf72c0d3724444e32a5dc91b8823e23f87b2d7d28e2cbe6c54b0f3b3d6414bd09debd4724c11f87737cc97674c50b86a68a67df0357368783a335a
SSDEEP 384:ZhdU9I4knpw+IHlaDrSckg3GIRio8ca+iPqZNAnW0h5xB9U4:DdOIbpwDH6rSL+p85W4W85xB9U4
TLSH
T15EE21BE368884944F7270C3523F96965237B6F56ACED6D06BB0D3290EA37C9D304BA1C
MD5 SHA1 SHA512 SSDEEP TLSH

offline-install.cmd

SHA256 d576161f87e50e979469c8a54d47b0535a672c76d7b0da85979583f99d1fa074
MD5 a89a7cbdfe17d4e5d452b5557598f203
SHA1 1f8eb44b09733d5fdc866007c2efd0f8a6c9cad6
SHA512 ac77cc112f7b2721a9a927e3d39bec19e8d3b51d4c10bf4817e707fbfd94cfb0ed31e705f0198881436eea065099aa1988fa4bd69d38cb539ed23f2386ade7a2
SSDEEP 96:7d8Z4urDRsl7QvJ4NZiVJRsfukWSOt8i3o+GkCQ77vXnMCrG6+HC5+G9z6wD9K4Q:7dymLNZOSu8i3o+TlYGeHC5j56kW
TLSH
T1B8C1631FB8C042314A7867A23A2A1544B71F12AF1710DFE974AF1138A7CD7DC76BE992
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/Funny Sounds ON.cmd

SHA256 b629825da98a67e410484129062196844718a1b56722221886bfabe07c721686
MD5 a3314cfd6ac8f583144c8e1299ddd175
SHA1 0a5eb3e4044615224dbc41dcc4f34b8f4571ae6d
SHA512 eff9ae6cec632a1105c874850a4b3864410c4bdd887cacad2ff4cb43478320926aca4759e38657e2d1faf424c486ba0a12ebaa2c9e74cd75af45012404f2d752
TLSH
T165A002CB3572280960E50C411A6FAC8EEC0E648B544AAE42787394B86C8AA5452254F1
MD5 SHA1 SHA512 TLSH

sounds/Funny Sounds ON.command

SHA256 756f9ac36fbab60160eafbe520e1d5c73b6eb1c9785a3a5d1e0ad0e3bc80457d
MD5 b31dd025141fde7c21aa5f78c393eade
SHA1 40e83341e0b6fc3d8229337647a29491a0a657b6
SHA512 64ee8036dd137c47e735a4536d43930d4f7e1de0d63faf13f671c6ff8bdfd0b8d9fc77b25618fc66efb8400030fc644ca71caf2037e2a8121d9b427a763af57b
TLSH
T118B092AEA19BA93A4AD9C8529E268CD1A94A780B1A082610546381A86294B403212A71
MD5 SHA1 SHA512 TLSH

linux

sounds/README.md

SHA256 20a3b30c8293608d0c018d4b1b519588413db3b36df3db773826f0b5eb50dadd
MD5 8fdafedf1872b7de7d6201151c3a90f3
SHA1 8fd28b30dc75a8d283dcf8defdaeae82e34618b5
SHA512 855aed4302e0dce9872ac32a2b203a2762c829e7c65198cbabd10f752c1149ebdd1e775dd62a385e03a4b93184dda3f8999bad9e8eba8c907ff65e6f6a13c795
SSDEEP 96:QIzIj+7c/qt6CxrwFd6gDgSREpZ565LKu+xu/e6nkrmyKtEX1lOojjGX4bW:QeIpSsCxG9USRCRu+I/9khKeXKou0W
TLSH
T123D1C9AFEDBD5E360AB6C315A35D21D7C330515D2A45392EF8DFD0287158A68410E2EB
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/Regular Sounds ON.cmd

SHA256 9feb768c7e2990bf359cdbeda75119a6ca03079f77c5e618ef5fda200ca85e93
MD5 5454647abe7c37a5b98d25113046b944
SHA1 654473a3b71a609339186ee91a9955bd336130e1
SHA512 8129aec9d9d860b7abeb244488ad804eac27120e4f3ba2767d513833780e35b689c5995646cca93f597cec653dc02aabcbc9a9ab9773315aad1c93dba1f8533e
TLSH
T194A0028B36B9380411E508512A6FA58EEC0D549F584EDE41B96355B46C8E554922D0F1
MD5 SHA1 SHA512 TLSH

sounds/Regular Sounds ON.command

SHA256 445d190cb33f0030b059d97056bf0eeb04c625c2fba195d16341ec9e9c3fe4d1
MD5 d26b30bc40d9fb4f9d4a08ae41e3cd51
SHA1 dc6eeb4d359cae0f1f1ed31a4a488d4790d415a5
SHA512 e9a3ece0ef0e3ec9efefc5c6c62ab0b1a77cdcb5374a627ac1f1c82922fbf93a7aa6871500de2240ceb8b8f4428772222bc7a8fdb5c2d2a4d8d33ad301a8c7b0
TLSH
T112B0926EA2AFB9350BD9C462AE268DD1A94A681F1E0CAA10945382B462987407216671
MD5 SHA1 SHA512 TLSH

linux

sounds/Sound OFF.cmd

SHA256 3b7e970a57761b98be1092fa1d19eb41b795b9df4baeedf9ecccd192df7552ab
MD5 c2eb9b64fb7668397d6a4f8b8863450b
SHA1 5af1493ae668f14fedce48b00baf94e12050257c
SHA512 3297bdeeb929142e60ce2c22d6685961f29cef60d216d08dcdd2f3cd31969d773e8edc3256e824a9d3862b0a6cf704bdc0949ed19987404c9e18ab37f3d40227
TLSH
T13CA0024B2521481511E60C41196FA09EFC0A548B54069D81686358B4AC8A55096250E2
MD5 SHA1 SHA512 TLSH

sounds/Sound OFF.command

SHA256 f10cc63bb4339abbcc30e78fa14acd7854ff90f981b9f380c6fcfc1ff1e3a013
MD5 08fce031a7ba195a624cc2f5d81efdf9
SHA1 fa675e288d5184eb813f314a8aeaaa8e9c503658
SHA512 20cfbc4be477aa23dd4af520888f46ebfa4e104b590b049b039975efd120e9e41b5be3910ea9e7a5e9e6b7cf9dee548d87d6dcb1164e182c885dab6b48d98cdc
TLSH
T11EB0122F914BDD360BDEC8539D3A8CE1BD47780F1F082610445385E4B2947407613672
MD5 SHA1 SHA512 TLSH

linux

sounds/Sound ON.cmd

SHA256 d97ed25f85f214301fa6cd93ab6ed59accb2f77f6f21e9d0b2486790326987f2
MD5 d4eaa222a7d4df6474b1e627caa47d1b
SHA1 7487c2e44ceb448a1852228fe64643a32b105430
SHA512 f97d61634487b75b30fee18f0ddaacdcf7bccffe7318f9f276ec58197a1f261d5ed60a14a87ed2358c69213cf55f2f6ca304dd32f8dda996c77db241706c5c2f
TLSH
T16DA0028B6521040410E60D42196FA09EFC1A548B50069D41786354B46C9A69452250E1
MD5 SHA1 SHA512 TLSH

sounds/Sound ON.command

SHA256 088e1346ba3b4d5a0fc425cecb6ea8ef528415bd321282845a49148e03d64b48
MD5 c8f1ccb5881533a12a8413fad5aa804b
SHA1 7dd7f81ecd10dc76ab958d9710b3329c3c0d3f4a
SHA512 68bf5331da80d629b6055859b21aee9e8bd9a5620adabdaf35174579e1fb1239921351451e7bda380274214015fabafb8ca9f833b595f4a98225bba1e81cc3bf
TLSH
T140B0126FD14BD9350BDEC9539D368CE1BD57780F1B082610545381E472A47803213671
MD5 SHA1 SHA512 TLSH

linux

sounds/Test Sounds.cmd

SHA256 d75d8ab0d1a830e3e9c99536080572101aaf1487212ccebaa2638865d730026c
MD5 eb52f9e4084e3985906f2d1a3ac11732
SHA1 31fac860318a8d1e2c56dc011754f16a8b0ccc6f
SHA512 077c57128a22470158644dd8393228d2af0f91d60d5236aa98f65a32a26bca83b68be2b217e344bd79f67e1fce635a238bc74dea1d4db97f726acebfb6754b6b
TLSH
T110F0E20BB2761A7BC1D098941D3FB236F966415FA900EF88B91FAA70539B183A336485
MD5 SHA1 SHA512 TLSH

sounds/Test Sounds.command

SHA256 922ba7789d2291b67955993f6aa21607ed05e65f8d8b5c6550911552b1903c8c
MD5 89fec9329fecbb0c142f6d3b7ad6c42d
SHA1 a7910ec9b25a9edd0c63afb362c0edd17135ce93
SHA512 ff36cf042330cd67f33db58815e0df801398892b80f4961d4917cb38317e4d5fcce547e8b93de932a93f4227a031eb80985ed9b93f4f12f1e9f7867299c030ec
TLSH
T1A3E0610A70A7853F0C84C6127FF753607513212F35058E5C787F55F193A5381717E1A2
MD5 SHA1 SHA512 TLSH

linux

sounds/View Alert Log.cmd

SHA256 cf3cd98ac233d9662574efb2820c0748d03d3166ac3700a1921953c9602f5526
MD5 c8a25aab735a50bacca9645ecbdb0bb8
SHA1 d2b9072f9585d7d4afdaea10cb2edbf5a7f7a6da
SHA512 972c42793a00b09ccac22981330bac69d96a836ca4a79cc09cb049b8c009095c901dbad939f3d7047d36e39bd69083b07c04e2e6a5f096be3096fd74d88ab734
TLSH
T1D3A0028B3535040410ED08811A7FA08EEC19548F50469E51686354BC6C8B65052254E1
MD5 SHA1 SHA512 TLSH

sounds/View Alert Log.command

SHA256 fdf3c8487f3b6ff5faef30f505460fe41c7f93967bccd0ab3ddc2cb296e11d3d
MD5 8b33a701b0f6e5389535fd77f3a82685
SHA1 5969d87bda7023e3af5ea81017508c66f9c80e8b
SHA512 932374a5b1f5dd6aed96d425c065e35378014a49851b30230772b81b42e09653cb6b71bd1bebe1663be502a0af8d069a9d9d51465cd7265d86372401e786fa7a
TLSH
T182B0126FA15FD9350BDDC4939E368CD1AD56780F1B082720445381EC72957403213A71
MD5 SHA1 SHA512 TLSH

linux

sounds/config.json

SHA256 09bc87bf8009dee4daf8b3d521e9fc3dcd6838204668095fa8af64b584a2ee58
MD5 76952783e4bbf49ce3f1fe867a5faca3
SHA1 5afad464c604a1d146a1a4fbedd5f54e5c8a73b9
SHA512 674917991ad4ecc193db255d8151adffa69b900afdbec8604ac0a7e9642fb5e787345f599d59a938bf84f3c6bf27c6e8b74449c4783bc2cf12d5320497a12262
TLSH
T1A6B012A1901C5BFE0778C80CB37401030524CFA884310C3FF1B7022C60191302348FA3
MD5 SHA1 SHA512 TLSH

sounds/configure-sound-hooks.js

SHA256 a6715bcab1de4ccf687c44c1f185a5f5dfcf091a09d45a5a5926ff7e101781f8
MD5 a367853dd2e3b0d62dc3e26bb6d1b09f
SHA1 78e592481272e5edcd08a1b47d78698ec4667708
SHA512 6061a6374716cdb0b7e207c626e7cf61de6a57724bf1cda3eb101db67941f77d9a1645060b1de5a7919492612af2646da346c0b2f83b6bbac3d2b8e27d8f8c6f
SSDEEP 96:RsScclBdbxyPjkZmRlruqKtTrjRVG1rMJWcXMBEhALwVGez:RbVlzEPIbq4rjRsWgaHfsez
TLSH
T1E3B1088711EC037F06E486B1F66F62599F93E2D93750B538F4AE41202B95068012FAFB
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/funny/done.wav

SHA256 246bf72e5fed4c14518ab177cd6ca945be491332a3d7237c8ce4c13a41b690c9
MD5 ecdfae5db0a58ebfb4df998e03e3a83b
SHA1 90b91c7533a0e47d17024256f40248df6de7d772
SHA512 e6360dc0e603676a633c11e18e2fe7e3c497288205e01b21be334cf02edfdcc6eb559b7d18c487c2f5b1a213e5ad3245616ff8c28bb17120d77e4f7e01fc8d8f
SSDEEP 3072:NFbwudDbq0M847rJ8c7k5zAll054F4PXCyWVNt+Ws8fu:cudPZjQru5CA4UC5K
TLSH
T1BC24A6D3F4864D02CC6F4B358573EE7142761D39FF661A0D2488BB056AE33C266B6A87
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/funny/permission.wav

SHA256 12f287208fc9264760da313b37c2e0829337556b8404220552fcc804308f212f
MD5 d1d7142d3495f0dea6022a607e2f5af0
SHA1 51c4e02a32b84f4aa930ef0ddabedac47b5dd217
SHA512 f2a9e8478103f9dd9a2401fef8528351e1fb6fdd167e7d3a177e0595a09f20e8219ebffe3f70f531acf8f834257abbeb92fd9694d3b01e12d075179b2240483f
SSDEEP 3072:zPUdvSSxlMRAgZgezwLWPTPeep7zQNqqWOIDmahKFnFflMduA5KS3zbfLH+14cFT:zrSw/Zge8SBQNREmTFFCNKsfLIZKwTye
TLSH
T1CA64E7D2F4468D11CC2B4A398573EE3107761D39FE6A5A1A3088BB0566F33C27776A87
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/funny/save.wav

SHA256 4b9cf3a107a292c4f0052bcb47c6ad45d413c80754ed36292c52a9f340ce5492
MD5 44d241b2b01d336365630d9601258e6a
SHA1 02f4e0c2b1c0e366c88479760d686af638730b8d
SHA512 aa06848bced677a9ee7ebcca5ef00fe8f8f9943c17c00f04915b6524f703290306beae195e88b75718f4f11094fe9c40807c596e7fc53d0150840eed62dc45b6
SSDEEP 3072:NhTaLWPHSUKDQNjqjs+Y76rbWoO7lqzQwJoH1a0D76cYp2FyzbaUeT:H2LeHSBDQpHWbWD7lAKUR22u
TLSH
T19244E6D2F4458D01CC274A7989B3EE3143762C39FE664A0A2584BB0576E33D377B6A87
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/funny/waiting.wav

SHA256 40175b9e554765ff022d950f482c75e98a31fe945fce6d19a7dfbc7544ab0cde
MD5 5df2125a559e590cff6cb8cb354a1000
SHA1 ae4b8616aaea9240ef03d66884c89d5f0e775471
SHA512 8748d51877ae93cd8c0f5a53fadb42919f7da2175ec7d16e14bcfe998594977299461e544f89aff71b76699ec9a7c5bd5611f86a24d8bb1035c34a475aadee4e
SSDEEP 3072:8XB2p9M0U3C8qYi8+Go/bi9GC8GKDjsRIWxvJwzyGoh6dl98GpE:QOGJGdjsRTvBP82j
TLSH
T1233483D3F4854901CC5B4A3A8573EF3102375C3AFE6A55093588BB066AF33D366A6A87
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/play.js

SHA256 e3123a43c8ad84cfc6413b564c7adf4aeae3c398af8438f58773198fa51e7157
MD5 89230d1c4745ac0690248bb0ff52f423
SHA1 f4f670a54e58af2a4da66d524bed431655d0e9f6
SHA512 b8d8325d1450f083662fa33131764f362bb80d158765296086f2571ff9b36c8ebfdb0b813a5e14afcf80f0fecc56914e6cd0ab85d9b3ce1fb4147c164398c06d
SSDEEP 192:NA357Uyjv3sh96/lkOuBWmAygDNnnKP7BOC:NAJ7Lv3s76/HdhnnIOC
TLSH
T15ED1D957ADFE20354312D9E55B2B2132E671D9223149EDA0F69ED2142FC1538436EFEC
MD5 SHA1 SHA512 SSDEEP TLSH

linux polyglot

sounds/play.vbs

SHA256 deb1b05b3416939ab9fc6bd09befd44d5ee667b35ae7c98ae5a7d85b370032b3
MD5 279dcf1299541c29bdf0580df8bc4046
SHA1 d69bd6449535493d30beab6ce5ef18830cd5f620
SHA512 c890cc706c69f664cdce64956052da8e77440fc62449190d9b0612fad31510e564906e720d71b2994a1b33a3ece2c86da69b5cb4775b594fcdbd0952111015fe
TLSH
T146117A351839927203B781C27117CE168BE5A46EE2979E10B51DE81C71A942F4C16557
MD5 SHA1 SHA512 TLSH

sounds/regular/done.wav

SHA256 4d9486ed2a4fa543f31284f1e33e1ddef68656b66b0d6e6b4bb398fedcc3c123
MD5 792868cbd8718d887e3eab55b323bf44
SHA1 e7fa207ed91e1d43ca4085c9ab7518c42a0b200a
SHA512 b4d332282614161204c91e877a3975656efe7c94a079a98a0405450ffbf10a388c3d390cc6ae06eb351d1f2c8f919841a0bb8d7375e58e1ed062345914ed8f4e
SSDEEP 768:Vk9fpLnm8Jmtc4SCMP+uDZ4M5q0RVr3nKHJ3smH9jCQXbaUy3Dlmr8E0C8aPfc:VMhLnm8YpBuDD/3KRFHwQXbm3DtIk
TLSH
T11753FCD3F4868D12CD1B0A7A8173BE3103360C35FEA69A4975887B0569A33D77776A83
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/regular/permission.wav

SHA256 68e181be17655712b5edc31dfbb9f37462cc0d7fba93c53fd35559e112115dfd
MD5 8da07aa01337733019ca53389323e094
SHA1 eb5514805fcdb5b7ef9b1990d4188ea55ec16066
SHA512 03cc503fda13026a586edce8bd73f7b16da4ee99cc1bf586af380242395e9db7a4e2f44d1f5014991e853d60d37e724a6b1ab3311a16b4df29e82976b05faa1a
SSDEEP 1536:MmPYW9Y5TKl9He13YaCwG+blnoilUZXUxUkJbaJFvAu5dEPh1:MmPYuaOG5CwcQAXUlWJFYuXU
TLSH
T160A394E2E4424E11CC175A7E8A73BE7607766C36FEA69A1630847E0525B33C36371AD3
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/regular/save.wav

SHA256 299be2c23ef4852b700cc63e0491284d728d1dda9e3360bacd7d3afd885e911c
MD5 fdca70279915b3a617fc4f45a140bc1e
SHA1 0d35163536c4149e0cd1ea898853978766b135c1
SHA512 2ea7ace2b43e71d2234f8d3c65eb06fab6687b5faef9d1b0eccefd83affdd48081d943e3a45b5da611a63b62643d7d96eddd9cafef3496b489e7ef62133d495f
SSDEEP 1536:cbf44A5H3gFz3EnIQBEoHCwracSv7ZjM6lAVsPI+DELPmWkcpjdo:cba5X8Qn/EoHCAahv7BpPI+DEb8c7o
TLSH
T1E8C31AD2F4464D11CC570A3B81B3BE3107761C2AFEA5891A3588BE0526E33D677B6AC7
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/regular/waiting.wav

SHA256 2a8398ed8792bf1bc90eb7ace5ecda53790242f9e60269139ba6089a95e094bd
MD5 b0922b5036cfbe5f13eea77084ed5ebc
SHA1 951558452ac666fd39f02662fe56ed48f31dd357
SHA512 28bd02723d57c7323c96496ae1f6a814c503b0efdbb6395c66b9a49782024834f7d8d0d1828a598d80ba655a32ebb5c67ad9e42a462db41c2591be8cc809b847
SSDEEP 3072:IoAToTNX6o4obDq+hMby40+Y/s0RI3kEbq4:pRJ42ubA3sAI0ED
TLSH
T1A3B3C593F4424911CC5B1E768973AF7103361C39FE6A9A1A35887B053AB33D27772AC6
MD5 SHA1 SHA512 SSDEEP TLSH

sounds/reminder.js

SHA256 6d2eab1e302fe5e904458835ecb9b8d6b39fbe9cff92a8c69d6ac76dd91b5f6b
MD5 5a67ddb2bf55b0dfd80e9002d8a0e35c
SHA1 6f58d95c3cbb32e49651c55711f48b4535f3e8c9
SHA512 5bfeaf196b6fd4ab378a220d55357f072345e55bcbf5c546099f1414b07258f64133db531d511cbd031585f258ab9ca70c45d2ec178181c683ec1b9d0dc04015
TLSH
T13F6187A635FE7A3A0253D8E8C40F8022A567C5466259D8B0F4CDA2E83F156258327DEF
MD5 SHA1 SHA512 TLSH

linux polyglot

sounds/voice.js

SHA256 437db3658f1071831ab5e882713d7eb6524c3d2ee973a50390d04f80ddb0a4b3
MD5 519908d5dbe6730b1fd761fd6ef1d034
SHA1 cf86955f475dc71213c7e4477d4cfe7b0ef5c444
SHA512 9f99fa900453d5a9483fcd008386eb59efa8695e02d2054dc37570e451c4df29214d6bb0d8e05364974f4b1e81e1dd182b478085f9ed6fa437f9c6c741aee31f
SSDEEP 96:1Wr3vjPP8VtF3q6l6mLOV+pxgFw6m5bEw2+5MEUUJSLmM/HByx5nqCgb:1ULPP8VtF3Ts+pqFwnER2Y3/g5Pgb
TLSH
T1B2912E8E0EFE6939427759D54E0F40232126DC53310AFA64B68E93AA3F81C5092779FF
MD5 SHA1 SHA512 SSDEEP TLSH

linux polyglot

statusline.mjs

SHA256 577597ad4b6e7daa5bc0e18a34a4891fc48c795bc28010517fca3be848e8c2b8
MD5 9d81c6d1dcc0f29dad55b2c9706a04de
SHA1 af7823fdd3ffa48fab2f0be8fa509ee7cfaeb2c9
SHA512 98001e5b25a3bcd70da1c4e89d295eb09c35663c0e6ecd7762dd71cd5f883be78bf26ddfd724d75c14128473cd57939d30beb7cf2f6a713186af02b8b7c10f10
SSDEEP 192:W6PUiMwHhn27N3DnPQzQb8kMLM0t04Aam5NaXox3QXVvwRImU4p19tEsHEQha:WAAwHhn27NzPQkbkTmWox3QXn3gOy7ha
TLSH
T16E22657525D37125BA55E2AD970F8025B339F002720AE9A4F1ACB9846FCE934C173EF6
MD5 SHA1 SHA512 SSDEEP TLSH

linux polyglot

Sharing

General

Malware Config

Signatures

File Explorer

Kivun_Terminal_Setup.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsExec.dll

advapi32

user32

kernel32

generic

CREDENTIALS.txt

KivunTerminal.exe

user32

kernel32

generic

README.md

README_INSTALLATION.md

SECURITY.txt

TROUBLESHOOTING.md

VERSION

config.txt

configure-statusline.js

folder-picker.hta

folder-picker.wsf

kivun-claude-bidi/README.md

kivun-claude-bidi/bin/kivun-claude-bidi

kivun-claude-bidi/lib/capability-check.js

kivun-claude-bidi/lib/detect-terminal.js

kivun-claude-bidi/lib/injector.js

kivun-claude-bidi/lib/resolve-claude-bin.js

kivun-claude-bidi/lib/rtl-cost-optimizer/detector.js

kivun-claude-bidi/lib/rtl-cost-optimizer/estimator.js

kivun-claude-bidi/lib/rtl-cost-optimizer/index.js

kivun-claude-bidi/lib/rtl-cost-optimizer/normalizer.js

kivun-claude-bidi/lib/wrapper.js

kivun-claude-bidi/package-lock.json

kivun-claude-bidi/package.json

kivun-claude-bidi/test/capability.test.js

kivun-claude-bidi/test/core.test.js

kivun-claude-bidi/test/cursor-forward-rtl.test.js

kivun-claude-bidi/test/dump-raw.test.js

kivun-claude-bidi/test/extended.test.js

kivun-claude-bidi/test/fake-claude.cjs

kivun-claude-bidi/test/flatten-colors-rtl.test.js

kivun-claude-bidi/test/ltr-island.test.js

kivun-claude-bidi/test/no-bracket-rtl-runs.test.js

kivun-claude-bidi/test/resolve-claude-bin.test.js

kivun-claude-bidi/test/rtl-cost-optimizer.test.js

kivun-claude-bidi/test/smoke.sh

kivun-claude-bidi/test/strip-bullet.test.js

kivun-claude-bidi/test/strip-incoming.test.js

kivun-detect-distro.cmd

kivun-diagnostics.cmd

kivun-direct.sh

kivun-ensure-user.sh

kivun-fix-display.cmd