k.jkwsdbhjfwejb.xyz and music data

70726f6d707465720d0a6e6d682d312e audio fringe loggedin no-preview MP3 possibly from https://www.youtube.com/watch?v=[...] > http[...] > http://k.jkwsdbhjfwejb.xyz/dl.php?id=295f39150b280f8830689fd4d1bf96ef These files were stored at "Volume in drive G is My Passport \ Volume Serial Number is 1093-F3E8" > * "G:\0\Documents\User\[redacted]\My Music\boomer.wpl" - basically contains this link: www.windowsmedia.com/RadioTunerAPI/Service.asmx/playStation?stationID=85d0cabd-f9b6-4968-a803-0aad09d9a6ce&dialupDetected=true&useHighBandwidth=false&locale=en-us * "G:\b\98a5-a98b\3\Beware.mp3" - MP3 file Text file "boomer.wpl" has the text: "media src="http://www.windowsmedia.com/RadioTunerAPI/Service.asmx/playStation?stationID=85d0cabd-f9b6-4968-a803-0aad09d9a6ce&amp;dialupDetected=true&amp;useHighBandwidth=false&amp;locale=en-us". web.archive.org/web/20120417233510/http://www.windowsmedia.com:80/RadioTunerAPI/Service.asmx/playStation?stationID=85d0cabd-f9b6-4968-a803-0aad09d9a6ce&dialupDetected=true&useHighBandwidth=false&locale=es-es has the following text: <pre><asx version="3.0"><param name="encoding" value="utf-8"/><title>Boomer Radio - Sweet Soul Music</title><abstract>The greatest Soul Oldies from Motown, Memphis and more.</abstract><moreinfo href="http://www.boomerradio.com"/><param name="logoURL" value="63062b0f-d03a-4636-ba21-e06456c09e63/dba89c31-c64c-456e-8515-53ebe7b76ea3.jpg"/><param name="stationStatus" value="1"/><param name="stationLocation" value="Lakeland,TN,US"/><entry><title>Boomer Radio - Sweet Soul Music</title><author>Boomer Radio</author><ref href="http://www.boomerradio.com/soulms.asx"/></entry></asx></pre>Substrings: * title>Boomer Radio - Sweet Soul Music * abstract>The greatest Soul Oldies from Motown, Memphis and more. * moreinfo [...] http://www.boomerradio.com * logoURL [...] 63062b0f-d03a-4636-ba21-e06456c09e63/dba89c31-c64c-456e-8515-53ebe7b76ea3.jpg * stationLocation [...] Lakeland,TN,US * author>Boomer Radio * http://www.boomerradio.com/soulms.asx Hashes of a binary file and a probably non-binary file via 7z and findstr: G:\>7z h -scrc* "G:\b\98a5-a98b\3\Beware.mp3"|findstr for CRC32 for data: 49AB528C CRC64 for data: 4B72071DECBD3B7C SHA256 for data: 4DE9278012DE4BB4C912C352BDDD1ED0319416C61C99BAAC0752526423DA741F SHA1 for data: 6D3B461FFEA56CEA5AB8C321D78085FA72B515EB BLAKE2sp for data: 73A1B360B4870E6A5FF036C13BA8DE1FCCB26F7F1A3949792E14D132EC2EDF1C G:\>7z h -scrc* "G:\0\Documents\User\R[redacted 0]\My Music\boomer.wpl"|findstr for CRC32 for data: E80C8B49 CRC64 for data: D7434FFD1D4CD5EB SHA256 for data: 053DD5F1EA576201E941B04ED96DC1435AFF174C66106612402DA5E5E6A471FC SHA1 for data: 4F602E8310649E3FB3BC8AFE611C9C17AE8774F9 BLAKE2sp for data: 22DE9E44D0EF34CD005A1514CA0F0ED2B47FB1F7577CD6A9A85083AFA66AE85B Properties of the text file and the audio file via exiftool, wmic, dir, xxd, and more: <pre>G:\b\98a5-a98b\3>dir /x/r&wmic datafile where name="G:\\b\\98a5-a98b\\3\\Beware.mp3" list/format:list&more < Beware.mp3:zone.identifier:$data Volume in drive G is My Passport Volume Serial Number is 1093-F3E8 Directory of G:\b\98a5-a98b\3 06/07/2021 01:20 AM <DIR> . 06/07/2021 01:20 AM <DIR> .. [...] 02/07/2021 03:31 PM 4,664,561 BADBOY~1.MP3 Bad Boys (1) Theme Song - Mark Mancina (Fan Made).mp3 151 Bad Boys (1) Theme Song - Mark Mancina (Fan Made).mp3:Zone.Identifier:$DATA 06/01/2021 10:30 PM 8,668,945 Beware.mp3 105 Beware.mp3:Zone.Identifier:$DATA 02/09/2021 03:51 AM 5,808,724 BILLIE~1.MP3 Billie Eilish - everything i wanted (Lyrics).mp3 151 Billie Eilish - everything i wanted (Lyrics).mp3:Zone.Identifier:$DATA [...] 3 Dir(s) 313,818,214,400 bytes free AccessMask=2032127 Archive=TRUE Caption=g:\b\98a5-a98b\3\beware.mp3 Compressed=FALSE CompressionMethod= CreationClassName=CIM_LogicalFile CreationDate=20210604194710.432355-360 CSCreationClassName=Win32_ComputerSystem CSName=RPM-HP14-BW012N Description=g:\b\98a5-a98b\3\beware.mp3 Drive=g: EightDotThreeFileName=g:\b\98a5-a98b\3\beware.mp3 Encrypted=FALSE EncryptionMethod= Extension=mp3 FileName=beware FileSize=8668945 FileType=MP3 Format Sound FSCreationClassName=Win32_FileSystem FSName=NTFS Hidden=FALSE InstallDate=20210604194710.432355-360 InUseCount= LastAccessed=20210801122956.861466-360 LastModified=20210601223044.528527-360 Manufacturer= Name=g:\b\98a5-a98b\3\beware.mp3 Path=\b\98a5-a98b\3\ Readable=TRUE Status=OK System=FALSE Version= Writeable=TRUE [ZoneTransfer] ZoneId=3 HostUrl=http://k.jkwsdbhjfwejb.xyz/dl.php?id=295f39150b280f8830689fd4d1bf96ef G:\b\98a5-a98b\3>cd G:\0\Documents\User[redacted 1]\My Music\ G:\0\Documents\User\R[redaced 2]My Music>dir /x/r/s&wmic datafile where name="G:\\0\\Documents\\User\[redacted 3]\My Music\\boomer.wpl" list/format:list&exiftool boomer.wpl Volume in drive G is My Passport Volume Serial Number is 1093-F3E8 Directory of G:\0\Documents\User\[redacted 4] Music 11/20/2019 03:32 AM <DIR> . 11/20/2019 03:32 AM <DIR> .. 12/13/2011 07:22 PM 788 boomer.wpl [...] 12/13/2011 06:40 PM 612 UNTITL~1.WPL Untitled Playlist.wpl [...]2 Dir(s) 313,818,214,400 bytes free AccessMask=2032127 Archive=TRUE Caption=g:\0\documents\user\[redacted 5]\my music\boomer.wpl Compressed=FALSE CompressionMethod= CreationClassName=CIM_LogicalFile CreationDate=20140507143803.170000-360 CSCreationClassName=Win32_ComputerSystem CSName=RPM-HP14-BW012N Description=g:\0\documents\user\[redacted 6]my music\boomer.wpl Drive=g: EightDotThreeFileName=g:\0\documents\user[redacted 7]my music\boomer.wpl Encrypted=FALSE EncryptionMethod= Extension=wpl FileName=boomer FileSize=788 FileType=Windows Media playlist FSCreationClassName=Win32_FileSystem FSName=NTFS Hidden=FALSE InstallDate=20140507143803.170000-360 InUseCount= LastAccessed=20210801120546.129919-360 LastModified=20111213192228.000000-360 Manufacturer= Name=g:\0\documents\user\r[redacted 8]\my music\boomer.wpl Path=\0\documents\user\[redacted 9]music\ Readable=TRUE Status=OK System=FALSE Version= Writeable=TRUE ExifTool Version Number : 12.01 File Name : boomer.wpl Directory : . File Size : 788 bytes File Modification Date/Time : 2011:12:13 18:22:28-07:00 File Access Date/Time : 2021:08:01 13:09:11-06:00 File Creation Date/Time : 2014:05:07 14:38:03-06:00 File Permissions : rw-rw-rw- File Type : TXT File Type Extension : txt MIME Type : text/plain MIME Encoding : us-ascii Newlines : Windows CRLF Line Count : 20 Word Count : 39 G:\0\Documents\User\[redacted 10]d\My Music>xxd G:\b\98a5-a98b\3\Beware.mp3:zone.identifier:$data 00000000: 5b5a 6f6e 6554 7261 6e73 6665 725d 0d0a [ZoneTransfer].. 00000010: 5a6f 6e65 4964 3d33 0d0a 486f 7374 5572 ZoneId=3..HostUr 00000020: 6c3d 6874 7470 3a2f 2f6b 2e6a 6b77 7364 l=http://k.jkwsd 00000030: 6268 6a66 7765 6a62 2e78 797a 2f64 6c2e bhjfwejb.xyz/dl. 00000040: 7068 703f 6964 3d32 3935 6633 3931 3530 php?id=295f39150 00000050: 6232 3830 6638 3833 3036 3839 6664 3464 b280f8830689fd4d 00000060: 3162 6639 3665 660d 0a 1bf96ef.. G:\0\Documents\User\R[redacted 11]d\My Music>xxd -ps G:\b\98a5-a98b\3\Beware.mp3:zone.identifier:$data 5b5a6f6e655472616e736665725d0d0a5a6f6e6549643d330d0a486f7374 55726c3d687474703a2f2f6b2e6a6b77736462686a6677656a622e78797a 2f646c2e7068703f69643d32393566333931353062323830663838333036 383966643464316266393665660d0a</pre> See also: * http://www.windowsmedia.com/RadioTunerAPI/Service.asmx/playStation?stationID=85d0cabd-f9b6-4968-a803-0aad09d9a6ce&dialupDetected=true&useHighBandwidth=false&locale=en-us * https://archive.org/search.php?query=%22boomerradio.com%22 * https://archive.org/search.php?query=%22www.boomerradio.com%22 * https://archive.org/search.php?query=%22Boomer+Radio%22 * https://archive.org/search.php?query=%22windowsmedia.com%22 * https://archive.org/search.php?query=%22www.windowsmedia.com%22 - had no results * https://web.archive.org/web/%2A/http://www.windowsmedia.com/RadioTunerAPI/Service.asmx/%2A - "501 URLs have been captured for this domain." ** search "85d0cabd" had one result (better than zero results!): https://web.archive.org/web/%2A/http://www.windowsmedia.com:80/RadioTunerAPI/Service.asmx/playStation?stationID=85d0cabd-f9b6-4968-a803-0aad09d9a6ce&dialupDetected=true&useHighBandwidth=false&locale=es-es > https://web.archive.org/web/20120417233510/http://www.windowsmedia.com:80/RadioTunerAPI/Service.asmx/playStation?stationID=85d0cabd-f9b6-4968-a803-0aad09d9a6ce&dialupDetected=true&useHighBandwidth=false&locale=es-es > a text file * Other search:<pre>G:\1>findstr /i /s /c:"Beware " *.txt \n [...] \n 3\1080[...]\Zelda Majora's Mask FAQ\zelda_majoras_mask_a_do_not_link_here.txt:Beware of the water as normal Link after the octopus monster, beacause it will damage</pre> identifier basically from stdout of "G:\1\1912[...]\1\nmh-1.7.1>dir /s/b|xxd", 00000380 eng Internet Archive HTML5 Uploader 1.6.4 www.windowsmedia.com; windowsmedia.com; 85d0cabd-f9b6-4968-a803-0aad09d9a6ce; 85d0cabd f9b6 4968 a803 0aad09d9a6ce; 85d0cabdf9b64968a8030aad09d9a6ce; Boomer Radio; www.boomerradio.com; boomerradio.com; Boomer Radio - Sweet Soul Music; Boomer Radio Sweet Soul Music; Beware.mp3; boomer.wpl; k.jkwsdbhjfwejb.xyz; jkwsdbhjfwejb.xyz; http://k.jkwsdbhjfwejb.xyz; k.jkwsdbhjfwejb.xyz (site); k.jkwsdbhjfwejb.xyz/ (website); 295f39150b280f8830689fd4d1bf96ef; text file; plain text file; http://www.boomerradio.com; www.boomerradio.com (site); boomerradio.com/ (website); generator: Microsoft Windows Media Player -- 11.0.5721.5280; Microsoft Windows Media Player -- 11.0.5721.5280; maybe generated by Microsoft Windows Media Player -- 11.0.5721.5280; music; station ID 85d0cabd-f9b6-4968-a803-0aad09d9a6ce; spoken English; WPL file; WPL; Microsoft Windows Media Player 11.0.5721.5280; link; links; URL; URLs; radio; dialupDetected=true; dialup k.jkwsdbhjfwejb.xyz and music data leedusmcclein@gmail.com 2021-08-01 19:19:11 2021-08-01 19:19:11 [curator]validator@archive.org[/curator][date]20210801191930[/date][comment]checked for malware[/comment] deemphasize

true