Two documents were published in the forum, which, according to the anonymous user, expose Emmanuel Macron of having an offshore account. The first<\/a> is an Operating Agreement for a company registered in the jurisdiction of Nevis Island, with Macron’s signature as the beneficiary and the second<\/a> is a bank letter from a bank in the Cayman Islands, issued to a company with a similar name. Both documents were refuted by Macron’s campaign headquarters, which published his signatures and a graphology expert report backing the forgery claim.<\/p>\n Bivol studied the metadata of the two documents, which show some interesting details, undetected by the French media so far as they have focused on spreading fake news. Both PDFs appear to have been created with professional high-end equipment manufactured by Canon. Here is what the metadata of the company La Providence LLC\u2019s 14-page Operating Agreement contains:<\/p>\n PDF Version <\/span>: 1.4 The specified time of the file\u2019s creation 4:22 a.m. Eastern Standard Time; the file was last modified five minutes later at 4:27 a.m. on May 3, the day of the debate. The scanning machine is a Canon iR-ADV 6255<\/a>, professional-grade black and white printer. The price of this gadget (new) is USD 29,999 and it looks like this:<\/p>\n The second file is in color and contains a single page. In its metadata we read the following:<\/p>\n PDF Version <\/span>: 1.4 This file was created just a minute after the previous one, at 4:23 a.m., and was last changed four minutes later. The Canon iPR C700 color printing machine that has scanned the document costs over USD 100,000 and looks like this:<\/p>\n What conclusions can be drawn from these scarce data? If the metadata in these two documents are original and not manipulated, it is obvious that the masterminds of the discrediting claim have access to high-end equipment <\/strong>that is used by large companies or institutions. The time of creation of the two documents, which is only a minute apart, indicates that the two machines were in the same room and they were, most likely, operated by two people. Moreover, the date of the files\u2019 creation that coincides with the day of the debate, contradicts the anonymous source’s assertion that the documents had been sent to many French journalists, but no one paid attention to them.<\/p>\n However, it is important to note that time parameters are not a reliable indicator since such devices are difficult to set up and\/or may not be set correctly for local time and the factory default data might have been kept.<\/p>\n More interesting is the unique identifier UUID<\/strong>. In Document ID, it is in version 2<\/a> and contains information on the time and the MAC address of the device that is unique to its network card.<\/p>\n The UUID of both devices contains the 2c-9e-fc characters. These are Canon’s MAC addresses<\/a>, which confirm the printers\u2019 descriptive data. Moreover, it is not a problem to get to the printers themselves, as their addresses are globally unique. The black-and-white printer has a MAC address 2C-9E-FC-1C-EF-D8<\/a> and the color one – 2C-9E-FC-ff-0D-6E<\/a>.<\/strong><\/p>\n In addition, metadata may be manipulated, which is impossible to prove, but such manipulation would also be a sign of high professionalism<\/strong>, not an amateur forgery concocted by Macron’s opponents and Le Pen’s fans.<\/p>\n It is ironic that Canon in French means cannon – a killing machine.<\/p>\n Vers la fin du d\u00e9bat de l\u2019entre-deux-tours entre Emmanuel Macron et Marine Le Pen, la candidate du Front National a attaqu\u00e9 son adversaire en disant qu\u2019elle esp\u00e9rait qu\u2019on ne lui d\u00e9couvre pas un compte bancaire quelque part aux Bahamas. Le lendemain, elle a r\u00e9p\u00e9t\u00e9 ceci dans une matinale, mais en indiquant bien, avec prudence, qu\u2019elle n\u2019avait pas de preuves. Macron a imm\u00e9diatement d\u00e9pos\u00e9 plainte pour diffusion de fausse nouvelle en vue de d\u00e9tourner les suffrages et le parquet de Paris a ouvert une enqu\u00eate.<\/span><\/p>\n Les m\u00e9dias fran\u00e7ais ont rapidement remont\u00e9 le fil de la fausse nouvelle publi\u00e9e \u00e0 19 h. dans le forum am\u00e9ricain 4chan<\/a>, terrain de pr\u00e9dilection pour l\u2019expression des id\u00e9es l\u2019extr\u00eame droite ainsi que pour la diffusion anonyme de toute sorte de th\u00e9ories complotistes. La \u00ab nouvelle \u00bb a \u00e9t\u00e9 reprise imm\u00e9diatement par des dizaines de comptes twitter pro Kremlin avec les tags #MacronCacheCash et #MacronGate<\/span><\/a>. La rumeur se r\u00e9pand pour \u00eatre utilis\u00e9e \u00e0 peine deux heures plus tard par Le Pen en fin de d\u00e9bat.<\/span><\/p>\n Le post<\/a> sur le forum publie deux documents qui, selon le profil anonyme, d\u00e9montrent qu\u2019Emmanuel Macron poss\u00e8de un compte offshore : le premier<\/a> repr\u00e9sente les statuts d\u2019une soci\u00e9t\u00e9, immatricul\u00e9e par la juridiction de l\u2019\u00eele de Ni\u00e9v\u00e8s, portant la signature de Macron dans la qualit\u00e9 de b\u00e9n\u00e9ficiaire, et le deuxi\u00e8me<\/a> est une lettre d\u2019une banque des \u00eeles Ca\u00efmans, d\u00e9livr\u00e9e \u00e0 une soci\u00e9t\u00e9 portant un nom similaire. Les documents ont \u00e9t\u00e9 r\u00e9fut\u00e9s par le QG de Macron, publiant ses signatures et une expertise de graphologie prouvant la contrefa\u00e7on.<\/span><\/p>\n Bivol a examin\u00e9 les m\u00e9tadonn\u00e9es des deux documents qui montrent des d\u00e9tails int\u00e9ressants, pour le moment rest\u00e9s en dehors des regards des m\u00e9dias fran\u00e7ais qui se concentrent sur la diffusion de la fausse nouvelle. Les deux fichiers PDF semblent \u00eatre cr\u00e9\u00e9s au moyen d\u2019un \u00e9quipement professionnel tr\u00e8s haut de gamme, produit par Canon. Voici le contenu des m\u00e9tadonn\u00e9es du fichier de 14 pages des statuts de la soci\u00e9t\u00e9 La Providence LLC :<\/span><\/p>\n PDF Version : 1.4 L\u2019heure indiqu\u00e9e de cr\u00e9ation du fichier est 04 :22 temps est am\u00e9ricain et le fichier a \u00e9t\u00e9 modifi\u00e9 une derni\u00e8re fois cinq minutes plus tard \u00e0 04 :27 le 3 mai, jour du d\u00e9bat. Le mat\u00e9riel utilis\u00e9 pour le scan est une imprimante noir et blanc de type professionnel Canon iR-ADV 6255<\/span><\/a>. Le prix de ce jouet neuf est de 29 999 USD et il ressemble \u00e0 ceci :<\/span><\/p>\n Le deuxi\u00e8me fichier est en couleurs et comporte une page. Ses m\u00e9tadonn\u00e9es nous indiquent ce qui suit :<\/span><\/p>\n PDF Version : 1.4 Ce fichier est cr\u00e9\u00e9 une minute seulement apr\u00e8s le pr\u00e9c\u00e9dent, \u00e0 04 :23 et a \u00e9t\u00e9 modifi\u00e9 en dernier 4 minutes plus tard. L\u2019imprimante couleurs Canon iPR C700 sur laquelle le scan a \u00e9t\u00e9 fait co\u00fbte plus de 100 000 USD et ressemble \u00e0 \u00e7a :<\/span><\/p>\n Quelles sont les conclusions \u00e0 tirer de ces donn\u00e9es parcimonieuses ? Si les m\u00e9tadonn\u00e9es de ces deux documents sont originales et non manipul\u00e9es, il est \u00e9vident que les cr\u00e9ateurs de l\u2019attaque disposent d\u2019un acc\u00e8s \u00e0 un mat\u00e9riel haut de gamme,<\/b> pr\u00e9sent dans de grandes soci\u00e9t\u00e9s ou institutions.<\/span><\/p>\n L\u2019heure de cr\u00e9ation des deux documents, d\u2019un d\u00e9calage d\u2019une minute seulement, montre que probablement les deux machines se trouvaient dans la m\u00eame pi\u00e8ce et que les op\u00e9rations ont \u00e9t\u00e9 effectu\u00e9es tr\u00e8s probablement par deux personnes. D\u2019autre part la date du jour du d\u00e9bat contredit l\u2019affirmation de la source anonyme que les documents avaient \u00e9t\u00e9 envoy\u00e9s \u00e0 de nombreux journaliste fran\u00e7ais dont personne n\u2019y a pr\u00eat\u00e9 attention.<\/span><\/p>\n Ceci dit, il est important de noter que les param\u00e8tres temporels ne sont pas un indicateur fiable car la configuration de ce type de machines est difficile et il est tout \u00e0 fait possible qu\u2019elle ne le soient pas correctement par rapport au temps et \u00e0 l\u2019heure locale, gardant par d\u00e9faut les donn\u00e9es de leur fabrication.<\/span><\/p>\n Ce qui est plus int\u00e9ressant, c\u2019est l\u2019identifiant unique UUID<\/strong>. Dans Document ID, il s\u2019agit d\u2019une version 2 et il comporte une information sur le temps et l\u2019adresse MAC de l\u2019appareil, qui est unique pour sa carte r\u00e9seau.<\/span><\/p>\n Les UUID des deux appareils comportent les symboles 2c-9e-fc . Ce sont des adresses MAC du fabricant Canon, ce qui confirme en soi les donn\u00e9es identifiant les imprimantes. De plus, il n\u2019y aurait pas de difficult\u00e9 d\u2019arriver aux imprimantes elles-m\u00eames, \u00e9tant donn\u00e9 que leurs adresses sont uniques au plan mondial. L\u2019imprimante noir et blanc a l\u2019adresse MAC 2C-9E-FC-1C-EF-D8<\/a><\/strong><\/b>, quant \u00e0 l\u2019imprimante couleur, c\u2019est : 2C-9E-FC-ff-0D-6E<\/a><\/strong><\/b><\/span><\/p>\n Bien entendu, il est possible que les m\u00e9tadonn\u00e9es soient manipul\u00e9es et c\u2019est impossible de le prouver, mais une telle manipulation ne ferait que confirmer le haut degr\u00e9 de professionnalisme<\/b>, pour arriver au point de cr\u00e9er un UUID conforme, y glissant les adresses MAC d\u2019appareils r\u00e9ellement existants pour tromper l\u2019adversaire. De plus, la source des fichiers PDF comporte beaucoup de r\u00e9f\u00e9rences renvoyant \u00e0 des Canon du type % CANON_PFINF_TYPE2_TEXTOFF<\/span><\/p>\n Finalement, la version d\u2019une manipulation est moins probable et il serait plus vraisemblable que les fichiers proviennent effectivement de ces deux appareils. Et dans les deux cas, \u00e0 savoir des m\u00e9tadonn\u00e9es authentiques pointant sur des scanners Canon ou bien des m\u00e9tadonn\u00e9es manipul\u00e9es, le mode op\u00e9ratoire est professionnel et pas du tout celui d\u2019une affaire mont\u00e9e de fa\u00e7on amateur par des adversaires de Macron et supporters de Le Pen.<\/span><\/p>\n Ce qui est amusant, c\u2019est que Canon en fran\u00e7ais est bien une arme qui tue.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":" At the end of the French presidential debate between frontrunners Emmanuel Macron and Marine Le Pen, the National Front candidate (Le Pen) attacked her rival by saying that she hoped…<\/p>\n","protected":false},"author":1,"featured_media":33745,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"give_campaign_id":0,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","kia_subtitle":"The fake news on Emmanuel Macron offshore account looks too professional","_lmt_disableupdate":"","_lmt_disable":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_wpcom_ai_launchpad_first_post":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"{title}\n\n{excerpt}\n\n{url}","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_wpas_customize_per_network":false,"jetpack_post_was_ever_published":false},"categories":[5542,5806],"tags":[7615,7616,7614,7617],"class_list":["post-33757","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-investigations-en","category-leading-en","tag-canon","tag-hoax","tag-macron","tag-offshore-account"],"yoast_head":"\n
\n<\/span>Linearized <\/span>: No
\n<\/span>Create Date <\/span>: 2017:05:03 04:22:12-04:00
\n<\/span>Creator <\/span>: Canon iR-ADV 6255 <\/span>PDF
\n<\/span>Modify Date <\/span>: 2017:05:03 04:27:37-04:00
\n<\/span>XMP Toolkit <\/span>: Adobe XMP Core 5.2-c001 63.139439, 2010\/09\/27-13:37:26
\n<\/span>Creator Tool <\/span>: Canon iR-ADV 6255 <\/span>PDF
\n<\/span>Metadata Date <\/span>: 2017:05:03 04:27:37-04:00
\n<\/span>Producer <\/span>: Adobe PSL 1.2e for Canon
\n<\/span>Format <\/span>: application\/pdf
\n<\/span>Document ID <\/span>: uuid:44930959-0000-2c9e-fc1c-efd800000000
\n<\/span>Instance ID <\/span>: uuid:b78218a3-b5dd-48d8-8911-47a87bf3850d
\n<\/span>Page Count <\/span>: 14<\/span><\/p>\n![\"\"](\"https:\/\/bivol.bg\/wp-content\/uploads\/2017\/05\/canon1.jpg\")
<\/a><\/p>\n
\n<\/span>Linearized <\/span>: No
\n<\/span>Create Date <\/span>: 2017:05:03 04:23:15-04:00
\n<\/span>Creator <\/span>: Canon iPR C700 <\/span>PDF
\n<\/span>Modify Date <\/span>: 2017:05:03 04:27:26-04:00
\n<\/span>XMP Toolkit <\/span>: Adobe XMP Core 5.2-c001 63.139439, 2010\/09\/27-13:37:26
\n<\/span>Creator Tool <\/span>: Canon iPR C700 <\/span>PDF
\n<\/span>Metadata Date <\/span>: 2017:05:03 04:27:26-04:00
\n<\/span>Producer <\/span>: Adobe PSL 1.2e for Canon
\n<\/span>Format <\/span>: application\/pdf
\n<\/span>Document ID <\/span>: uuid:7a930959-0000-2c9e-fcff-0d6e00000000
\n<\/span>Instance ID <\/span>: uuid:510044f5-8850-4054-a6c4-3fb911957f0d
\n<\/span>Page Count <\/span>: 1<\/span><\/p>\n![\"\"](\"https:\/\/bivol.bg\/wp-content\/uploads\/2017\/05\/canon2.jpg\")
<\/a><\/p>\n
\nCanon pour Macron<\/b><\/span><\/h1>\n
La fausse nouvelle d\u2019un compte d\u2019Emmanuel Macron dans un paradis fiscal para\u00eet bien trop professionnelle<\/span><\/h2>\n
\nLinearized : No
\nCreate Date : 2017:05:03 04:22:12-04:00
\nCreator : Canon iR-ADV 6255 PDF
\nModify Date : 2017:05:03 04:27:37-04:00
\nXMP Toolkit : Adobe XMP Core 5.2-c001 63.139439, 2010\/09\/27-13:37:26
\nCreator Tool : Canon iR-ADV 6255 PDF
\nMetadata Date : 2017:05:03 04:27:37-04:00
\nProducer : Adobe PSL 1.2e for Canon
\nFormat : application\/pdf
\nDocument ID : uuid:44930959-0000-2c9e-fc1c-efd800000000
\nInstance ID : uuid:b78218a3-b5dd-48d8-8911-47a87bf3850d
\nPage Count : 14<\/span><\/p>\n<\/a><\/p>\n
\nLinearized : No
\nCreate Date : 2017:05:03 04:23:15-04:00
\nCreator : Canon iPR C700 PDF
\nModify Date : 2017:05:03 04:27:26-04:00
\nXMP Toolkit : Adobe XMP Core 5.2-c001 63.139439, 2010\/09\/27-13:37:26
\nCreator Tool : Canon iPR C700 PDF
\nMetadata Date : 2017:05:03 04:27:26-04:00
\nProducer : Adobe PSL 1.2e for Canon
\nFormat : application\/pdf
\nDocument ID : uuid:7a930959-0000-2c9e-fcff-0d6e00000000
\nInstance ID : uuid:510044f5-8850-4054-a6c4-3fb911957f0d
\nPage Count : 1<\/span><\/p>\n<\/a><\/p>\n