New analysis suggests Guccifer 2.0 files copied locally, not hacked by Russia
RT | July 12, 2017
Files stolen from the Democratic National Committee (DNC) were likely downloaded to a USB drive by someone with physical access to a computer connected to the DNC network, not hacked remotely by Russia, according to a new analysis.
In an interview with Motherboard in June 2016, the hacker who claimed to be Guccifer 2.0 said he used a zero-day exploit to breach the DNC server and steal files he later published under the title “NGP-VAN.”
The leak was quickly attributed to the Russian government. However, a document published Sunday by an individual known as the Forensicator shows how the 7-zip file published by Guccifer 2.0 was transferred at a speed of 23 MB/s, making it “unlikely that this initial data transfer could have been done remotely over the Internet.”
“The initial copying activity was likely done from a computer system that had direct access to the data,” the report from the Forensicator stated. “By ‘direct access’ we mean that the individual who was collecting the data either had physical access to the computer where the data was stored, or the data was copied over a local high speed network (LAN).”
For his analysis, the Forensicator looked at the data from the 7-zip file which showed the .rar files were built on September 1, 2016, while the other files were last modified on July 5, 2016. When the .rar files are unpacked using a program called WinRAR, their timestamps were preserved from the date they were transferred.
The timestamps of those .rar files were relative times, while the times recorded in the 7-zip files are absolute times, recorded in Coordinated Universal Time (UTC). The Forensicator found that if the .rar files were adjusted to Eastern Time, they “fall into the same range as the last modified times for the directories archived in the .rar files.”
Therefore, the Forensicator concludes that the files were built on a computer system where the Eastern Daylight Savings Time (EDT) timezone setting was in force, meaning that the system was most likely located on the East Coast of the US.
The Forensicator then generated a list of the files sorted by the date they were last modified and imported the list into an Excel spreadsheet. Analyzing the files by date last modified, he observed that the last modified times were clustered together in a 14-minute time period on July 5, 2016.
The analysis of the metadata also found a majority of the time it took for the files to be copies, 12 minutes and 48 seconds of the 14 minutes and 15 seconds, was allocated to “time gaps” that appear between several top-level files and directories. The Forensicator concluded that this indicated that the files were chosen from a much larger collection of files.
Estimating the transfer speed of the files published by Guccifer, the Forensicator concluded that if the 1.98 GB 7-zip archive published by Guccifer was copied at a rate of 22.6 MB/s, and all the time gaps were attributed to additional file copying, the initial file copy would be 10 times larger, or 19.3 GB.
No comments yet.
Featured Video
David GIbbs: How Intelligence Services Captured Academia & Journalism
or go to
Aletho News Archives – Video-Images
From the Archives
It’s a HOLOHOAX (Don’t Be Fooled) Pt5
Renegade Tribune | March 4, 2020
… It is true that in 1945, Allied propaganda did claim that all the concentration camps, particularly those in Germany itself, were “Death Camps,” but not for long. On this question the American historian Professor Harry Elmer Barnes wrote, “These camps were first presented as those in Germany, such as Dachau, Belsen, Buchenwald, Sachsenhausen and Dora, but it was soon demonstrated that there had been no systematic extermination in those camps. Attention was then moved to Auschwitz, Treblinka, Belzec, Chelmno, Jonowska, Tarnow, Ravensbruck, Mauthausen, Brezeznia and Birkenau, which does not exhaust the list that appears to have been extended as needed.”
What had happened was that certain honest observers among the British & American occupation forces in Germany, while admitting that many camp inmates had died of disease & starvation in the final months of the war, had found no evidence after all of “gas chambers.”
As a result, eastern camps in the Russian zone of occupation, such as Auschwitz & Treblinka, gradually came to the fore as horrific centers of “extermination”, though no one was permitted to see them. This tendency has lasted almost to the present day.
Here in these camps it was all supposed to have happened, but with the Iron Curtain brought down firmly over them it was difficult to verify such charges. … Read full article
Blog Roll
Aletho News- US-led Board of Peace considers ‘wholesale’ Hamas disarmament deal to satisfy Israel: Report
- The impunity granted to Israel is as shocking as its violence
- Israel bombs Syrian military base as US praises Damascus’s ‘de-escalatory’ policy toward Tel Aviv
- Iraqi Kata’ib Hezbollah sets conditions to place weapons under state control
- Burning America’s Cards One by One: What is Iran’s Strategy?
- Iran warns shipping companies against supporting US military operations: Report
- Pentagon weighs leaving Persian Gulf after Iran ‘exposed vulnerabilities’: Report
- Iran war marks end of US Middle East order: Foreign Affairs
- DoD Missile Shopping Spree Designed to Spread Superprofits, ‘Not Win Wars’: Karen Kwiatkowski
- Europe’s Looming Winter Preparations Just Got 1.5X Costlier
- If Americans Knew
- US voters don’t want American and Israeli militaries to merge
- Mossad Officially Enters the US Military Supply Chain
- ‘Destroying agriculture is the purpose’: How Israel is drying up the West Bank’s most fertile farmlands
- Life in a laboratory of Israeli ethnic cleansing
- One of Congress’s most pro-Israel members is facing strong opposition from an anti-Zionist in Florida
- Israeli soldiers number Palestinian detainees on their foreheads
- The Torture Regime: How Israeli prisons went from centers of Palestinian resistance to machines of Palestinian death
- Jared Kushner met with Hamas and Netanyahu – guess which he trusts, and which he wants to disarm? – Daily Update
- 102 Rights Groups Call on Rubio to Secure Release of US Citizen Sama Safi, Imprisoned in Israel Since June
- How public health research supports accountability for Israeli war crimes in Gaza
- No Tricks Zone
- Veteran Swiss Meteorologist On Germany’s Recent Heat Wave: “You’re A Really Crazy Country”
- New Research Documents The Lack Of Any Net Decline In GBR Coral Cover Since The 1980s
- New Study Details Massive Recent Sea Ice Expansion And Cooling In The Greenland Sea
- Germany Also Saw Extreme Drought Conditions In The 1940s…Worse Than Today
- Another New Study Links Modern And Past Global Warming To Natural Changes In Cloud Cover, Not CO2
- Uncertainty In Estimating Solar Forcing Across The Arctic Is 100-350x Larger Than CO2’s Alleged Climate Impact
- Farce Of The Week: Germany’s Weather Site Donnerwetter.de Attempts To Measure The Rhine River’s Temperature!
- Analysis: Robert Koch Institute’s Heat Death Model Is “A Joke”… Deaths “Assumed” To Be Due To Heat
- New Research Finds Increasing CO2 Induces Cooling In The Lower Atmosphere Over The Arctic
- Germany’s Industrial Suicide… Grid Agency Prepares Secret Power Rationing Plans Amid Electric Power Bottlenecks
Aletho News 
Leave a comment