New analysis suggests Guccifer 2.0 files copied locally, not hacked by Russia
RT | July 12, 2017
Files stolen from the Democratic National Committee (DNC) were likely downloaded to a USB drive by someone with physical access to a computer connected to the DNC network, not hacked remotely by Russia, according to a new analysis.
In an interview with Motherboard in June 2016, the hacker who claimed to be Guccifer 2.0 said he used a zero-day exploit to breach the DNC server and steal files he later published under the title “NGP-VAN.”
The leak was quickly attributed to the Russian government. However, a document published Sunday by an individual known as the Forensicator shows how the 7-zip file published by Guccifer 2.0 was transferred at a speed of 23 MB/s, making it “unlikely that this initial data transfer could have been done remotely over the Internet.”
“The initial copying activity was likely done from a computer system that had direct access to the data,” the report from the Forensicator stated. “By ‘direct access’ we mean that the individual who was collecting the data either had physical access to the computer where the data was stored, or the data was copied over a local high speed network (LAN).”
For his analysis, the Forensicator looked at the data from the 7-zip file which showed the .rar files were built on September 1, 2016, while the other files were last modified on July 5, 2016. When the .rar files are unpacked using a program called WinRAR, their timestamps were preserved from the date they were transferred.
The timestamps of those .rar files were relative times, while the times recorded in the 7-zip files are absolute times, recorded in Coordinated Universal Time (UTC). The Forensicator found that if the .rar files were adjusted to Eastern Time, they “fall into the same range as the last modified times for the directories archived in the .rar files.”
Therefore, the Forensicator concludes that the files were built on a computer system where the Eastern Daylight Savings Time (EDT) timezone setting was in force, meaning that the system was most likely located on the East Coast of the US.
The Forensicator then generated a list of the files sorted by the date they were last modified and imported the list into an Excel spreadsheet. Analyzing the files by date last modified, he observed that the last modified times were clustered together in a 14-minute time period on July 5, 2016.
The analysis of the metadata also found a majority of the time it took for the files to be copies, 12 minutes and 48 seconds of the 14 minutes and 15 seconds, was allocated to “time gaps” that appear between several top-level files and directories. The Forensicator concluded that this indicated that the files were chosen from a much larger collection of files.
Estimating the transfer speed of the files published by Guccifer, the Forensicator concluded that if the 1.98 GB 7-zip archive published by Guccifer was copied at a rate of 22.6 MB/s, and all the time gaps were attributed to additional file copying, the initial file copy would be 10 times larger, or 19.3 GB.
No comments yet.
Featured Video
Seyed M. Marandi: Negotiations Collapsed – Return to War
or go to
Aletho News Archives – Video-Images
From the Archives
Wartime internment camps in Australia
National Archives of Australia
World War I
During World War I, for security reasons the Australian Government pursued a comprehensive internment policy against enemy aliens living in Australia.
Initially only those born in countries at war with Australia were classed as enemy aliens, but later this was expanded to include people of enemy nations who were naturalised British subjects, Australian-born descendants of migrants born in enemy nations and others who were thought to pose a threat to Australia’s security.
Australia interned almost 7,000 people during World War I, of whom about 4,500 were enemy aliens and British nationals of German ancestry already resident in Australia.
Records of World War I internment camps
World War II
During World War II, Australian authorities established internment camps for three reasons – to prevent residents from assisting Australia’s enemies, to appease public opinion and to house overseas internees sent to Australia for the duration of the war.
Unlike World War I, the initial aim of internment during the later conflict was to identify and intern those who posed a particular threat to the safety or defence of the country. As the war progressed, however, this policy changed and Japanese residents were interned en masse. In the later years of the war, Germans and Italians were also interned on the basis of nationality, particularly those living in the north of Australia. In all, just over 20 per cent of all Italians resident in Australia were interned. … continue
Blog Roll
Aletho News- Tomorrow’s naval blockade showdown
- ‘Israel’ attacks civilians to hide its embarrassing military failures & out of pure sadism
- Any Foreign Military Vessel Approaching Hormuz Under Any Pretext ‘Will Be Dealt With Severely’: IRGC
- Diplomats slam US negotiators’ performance in Iran talks
- Trump Refuses Exit Ramp, War with Iran will Continue
- Trump Says US Naval Blockade in Strait of Hormuz Will Begin Shortly
- US, Iran end 21-hour talks without agreement
- US IRAN TALKS: Who Are the Crazy Ones Here? /Lt Col Daniel Davis
- Talks with the US end without a deal over excessive US demands: Iran
- Feeling Better, Getting Worse: How Psychiatric Drugs Create the Illusion They Cure
- If Americans Knew
- US-Iran ceasefire negotiations make zero progress – Daily Update
- Pro-Israel ‘Thinktanks’ and Individuals who Influence U.S. Foreign Policy
- Mearsheimer reveals how Israel dictates US policies on Iran, Gaza – video
- After killing 350+, Israel still has a “score to settle” with Lebanon before ceasefire – Daily Update
- Military aid to Israel emerges as the latest political litmus test for Democrats
- The only Palestinian children’s rights organization closes following years-long Israeli campaign against it
- ‘I Can’t Forget the Smell’: Lebanese Reel After Israel Kills Over 300 in Single Day
- DNC Shoots Down Resolutions Calling Out AIPAC and Limiting Arms to Israel
- TCN: Is Israel Blackmailing President Trump?
- Israel killed at least 303 Lebanese yesterday – who were they? Daily Update
- No Tricks Zone
- German Expert: Heat Dome Led To Record Temps In Western USA…Warmer In 1934, 1936
- New Study: No Linear Warming Or Glacier Retreat Along Northern Antarctic Peninsula Since 1980s
- An Inconvenient Tree: Uncovered In Alps… Europe Much Warmer Than Today 6000 Years Ago
- New Study Reports A 60% Slowdown In Greenland’s Ice Loss Rate In The Last Decade
- Low Intensity Tornado Wrecks Major Solar Farm, Creating A Potential Toxic Dump
- New Study Finds Warming Saves Lives…Cold Temperatures 12 Times More Deadly Than Excess Heat
- German Science Blog Accuses PIK Climate Institute Of Hallucinating Climate Tipping Points
- Devastating Assessment Of Comirnaty Vaccine By Former Senior Pfizer Europe Toxicologist
- New Study: CO2 Is ‘Effectively Negligible’ As An Explanatory Climate Change Factor Since 2000
- Former Pfizer Toxicologist Dr. Helmut Sterz Tells Bundestag Hearing Pfizer Vaccine Should Have Never Been Approved
Aletho News 
Leave a comment