Adam Carter

July 13, 2018 – Mueller’s indictment of Russian intelligence officers, contradicts evidence in the public domain

“On July 13th, 2018, an indictment was filed by Special Counsel Robert Swan Mueller III.

This author is responding to the indictment because it features claims about Guccifer 2.0 that are inconsistent with what has been discovered about the persona, including the following:

Evidence was found over 500 days ago relating to the Guccifer 2.0 persona that showed they had deliberately manipulated files to have Russian metadata. We know the process used to construct the documents was not due to accidental mistakes during the creation process.

The original template document that Guccifer 2.0 used has been identified. It is also the source of the presence of Warren Flood’s name and can be found attached to one of Podesta’s emails (it has RSIDs matching with Guccifer 2.0’s first couple of documents).

The Trump opposition research, which CrowdStrike claimed was targeted at the DNC, apparently in late April 2016, isn’t what Guccifer 2.0 actually presented to reporters. It also didn’t come from the DNC but was an attached file on one of John Podesta’s emails – not the DNC’s. This specific copy appears to have been edited by Tony Carrk shortly before it was sent to Podesta. The fact that Guccifer 2.0’s initial releases were Podesta email attachments was even conceded by a former DNC official.

It appears that Guccifer 2.0 fabricated evidence on June 15, 2016, that coincidentally dovetailed with multiple claims made by CrowdStrike executives that had been published the previous day.

Guccifer 2.0 went to considerable effort to make sure Russian error messages appeared in copies of files given to the press.

Evidence – which Guccifer 2.0 couldn’t manipulate due to being logged by third parties – suggests he was operating in the US.

Additional evidence, which Guccifer 2.0 would have been unlikely to realize “he” was leaving, indicated that the persona was archiving files in US time zones before release, with email headers giving him away early on.

Virtually everything that has been claimed to indicate Guccifer 2.0 was Russian was based on something he chose to do.

Considering that Guccifer 2.0 had access to Podesta’s emails, yet never leaked anything truly damaging to the Clinton campaign even though he would have had access to it, is highly suspicious. In fact, Guccifer 2.0 never referenced any of the scandals that would later explode when the DNC emails and Podesta email collections were published by WikiLeaks.” (Read more: Adam Carter, Disobedient Media, 7/15/2018)

June 15, 2016 – Guccifer 2.0 Timeline – What Happened & When Did It Happen?

We have been told by mainstream press (citing anonymous intelligence officials) that Guccifer 2.0 was a GRU officer. We have also seen this asserted in an indictment that emerged in July 2018.

However, there are many reasons why this attribution remains doubtful, and, unlike the attribution, these reasons are based on verifiable evidence that is already in the public domain.

This project (“Guccifer 2.0: Game Over”) was built upon a simple, yet effective principle:

In order to even begin to understand who Guccifer 2.0 could have been, it was imperative to first understand WHAT Guccifer 2.0 was.

This site links to evidence and discoveries made during the past two years that help to explain what Guccifer 2.0 was. Much of the evidence has been disregarded by the mainstream press and is routinely omitted in their reportage despite the volume of evidence and how comprehensive and detailed some of the analysis has been (especially with regard to studies published by third parties). (See Guccifer 2.0 Timeline, 1/12/2019)

June 15, 2016 – Guccifer 2.0’s American fingerprints reveal an operation made in the USA

(Credit: The Forensicator)

“In his final report in a three-part series, Guccifer 2’s West Coast Fingerprint, the Forensicator discovers evidence that at least one operator behind the Guccifer 2.0 persona worked from the West Coast of the United States.

The Forensicator’s earlier findings stated that Guccifer 2.0’s NGP-VAN files were accessed locally on the East Coast, and in another analysis they suggested that a file published by Guccifer 2.0 was created in the Central time zone of the United States. Most recently, a former DNC official refuted the DNC’s initial allegations that Trump opposition files had been ex-filtrated from the DNC by Russian state-sponsored operatives.

So, if Guccifer 2.0’s role was negated by the statements of the DNC’s own former “official” in a 2017 report by the Associated Press, why do we now return our attention to the Guccifer 2.0 persona, as we reflect on the last section of new findings from the Forensicator?

The answer: Despite almost two years having passed since the appearance of the Guccifer 2.0 persona, legacy media is still trotting out the shambling corpse of Guccifer 2.0 to revive the legitimacy of the Russian hacking narrative. In other words, it is necessary to hammer the final nail into the coffin of the Guccifer 2.0 persona.

As previously noted, In his final report in a three-part series, the Forensicator discusses concrete evidence that at least one operator behind the Guccifer 2.0 persona worked from the West Coast of the United States. He writes:

“Finally, we look at one particular Word document that Guccifer 2 uploaded, which had “track changes” enabled. From the tracking metadata we deduce the timezone offset in effect when Guccifer 2 made that change — we reach a surprising conclusion: The document was likely saved by Guccifer 2 on the West Coast, US.”

The Forensicator spends the first part of his report evaluating indications that Guccifer 2.0 may have operated out of Russia. Ultimately, the Forensicator discards those tentative results. He emphatically notes:

“The PDT finding draws into question the premise that Guccifer 2 was operating out of Russia, or any other region that would have had GMT+3 timezone offsets in force. Essentially, the Pacific Timezone finding invalidates the GMT+3 timezone findings previously described.”

The Forensicator’s new West Coast finding is not the first evidence to indicate that operators behind the Guccifer 2.0 persona were based in the US. Nine months ago, Disobedient Media reported on the Forensicator’s analysis, which showed (among other things) that Guccifer 2.0’s “ngpvan” archive was created on the East Coast. While that report received the vast majority of attention from the public and legacy media, Disobedient Media later reported on another analysis done by the Forensicator, which found that a file published by Guccifer 2.0 (on a different occasion) was probably created in the Central Timezone of the US.

Adding to all of this, UK based analyst and independent journalist Adam Carter presented his own analysis which also showed that the Guccifer 2.0 Twitter persona interacted on a schedule which was best explained by having been based within the United States.” (Read more: Disobedient Media, 5/29/2018)

May 23, 2016 – Luis Miranda’s emails are a part of the first to be exported from the DNC and are not addressed in the Mueller report

The Special Counsel that was formed to investigate “RussiaGate” appears to have been oblivious to the fact that emails were exported from Luis Miranda’s mailbox on May 23, 2016. Did the Special Counsel choose to omit information or did the evidence from Crowdstrike not inform them of all activity that occurred at the DNC?

For those who don’t already know, analysis of the leaked DNC emails that were published by WikiLeaks was carried out earlier this year and it revealed that the emails were acquired in multiple batches on different days. (This is something that can easily be verified independently by simply looking at the last modified dates in the metadata of WikiLeaks’ collection of DNC emails.)

The first batch of emails acquired in May were mostly from Luis Miranda’s mailbox (which was also the source of most of the emails dubbed as “damaging” by the media), however, emails from Jeremy Brinster, Ryan Banfill and Andy Crystal also appear to have been acquired on this date.

These emails were exported to EML files on May 23, 2016.

Strangely, though, there is no mention of this date in the Netyksho indictment or the Mueller report.

The Mueller report states:

And the Netyksho indictment states:

The phrase “during that time” implies that research attributed to Yermakov occurred between the dates cited.

However, we already know that DNC emails published by WikiLeaks started to be acquired before that time.

To clarify, this means emails (from mailboxes of Miranda, Brinster, Banfill and Crystal) were exported on May 23, 2016 and then, approximately 2 days later, Yermakov allegedly researched PowerShell commands to export emails and the DNC’s mail server was allegedly accessed by GRU officers who then took a batch of emails spanning multiple mailboxes.

(I say “allegedly accessed” because both the Netyksho indictment and the Mueller report lack sufficient evidence to demonstrate that infrastructure attributed to the GRU was genuinely controlled by the GRU.)

And it seems the activity relating to May 23, 2016 may be unknown to the Special Counsel for some reason.

CrowdStrike had started monitoring the network two weeks prior to the email acquisition on May 23, 2016. So, they should have captured and recorded evidence of this activity but, oddly, it seems the Special Counsel was unaware of it.” (Read more: Adam Carter, 10/20/2019)  (Archive)