Global v Local mirrored time

update that we recently made to Guccifer 2’s Russian Breadcrumbs.

Original repport: GMT+4 timezone offset (legacy Moscow DST) in a batch of files that Guccifer 2 posted on July 6, 2016

based on new information, we have revised that conclusion: The timezone offset was in fact GMT-4 (US Eastern DST)

We mistakenly interpreted the last modified time that LibreOffice wrote as “2015-08-25T23:07:00Z” as a GMT time value. Typically, the trailing “Z” means “Zulu Time“, but in this case, LibreOffice incorrectly added the “Z”. McIntyre’s tests confirm that LibreOffice records the “last modified” time as local time (not GMT).

two important details: (1) the GMT time that the file was saved is recorded in the Zip file components that make up the final document and (2) the document internal last saved time is recorded as local time (unlike Microsoft Word, which records it as a GMT [UTC] value).

two important details: (1) the GMT time that the file was saved is recorded in the Zip file components that make up the final document and (2) the document internal last saved time is recorded as local time (unlike Microsoft Word, which records it as a GMT [UTC] value).

https://disobedientmedia.com/2018/12/forensicator-guccifer-2-0-returns-to-the-east-coast/

5/15/2016 - Crowdstrike claims it investigated DNC hacking and that Russians were responsible; FBI still denied access to server to confirm

5/16/2016 - Draft statement by FBI directory Comey exonerating Clinton, before key interviews, is circulated to FBI leadership