This page covers conclusions that relate to the evidence highlighted here and here.
If you don't know about the RTF/RSID evidence already - please read this first.
Having seen the initial evidence of intent - we know that the first 3 documents were all created from the same blank Russian-language template and that contents from original documents were then copied into each at a later stage.
Now we can take a look at the metadata - and see that it corroborates and helps provide more detail to what we know about the process used.
|File||Created By||Time||Modified By||Time|
|1.doc||Warren Flood||1:38pm||Феликс Эдмундович||2:08pm|
|2.doc||Warren Flood||1:38pm||Феликс Эдмундович||2:11pm|
|3.doc||Warren Flood||1:38pm||Феликс Эдмундович||2:12pm|
We can see that a copy of MS-Word registered to "Warren Flood" was apparently used to create all 3 documents at the same time, this would seem odd usually - but we know he was just saving a tainted blank template as multiple files.
We then see that "Феликс Эдмундович" (the founder of the soviet secret police and someone who has been deceased for 90 years!) opens the files in sequence 30 minutes later, doing something (copying in the contents from original documents into the blank 'pre-tainted' template) and then saving the files, within the space of a few minutes.
SUMMARY: The files were constructed from the same template document with a Russian stylesheet entry in it and then each file, in sequence, was opened to add a secondary layer (writing the Russian name to metadata) when content was copied into them. - TWO layers of Russian "fingerprints", with one existing in the documents even before the main content was present in them!
Guccifer 2.0, from day one, was intending to be identified as a Russian and knew anything he could forge a perceived attribution with would later be easy to discredit because of their association with the 'Russian Hacker' persona.
This research has been shared with a few independent security experts and they too have struggled to find any reasonable & substantiated alternative explanations for what we have discovered.
Everything we have shown you on RTF/RSID & metadata can be CHECKED and VERIFIED by ANYONE independently and immediately!
WHAT YOU HAVE BEEN TOLD FOR THE LAST 9 MONTHS IS NOT WHAT THE EVIDENCE SUPPORTS