The Rabbit Files 9.5: Chronicling the Path to Who Spoofed the Seth Rich Files

The following introduction is taken from The Rabbit Files 7.3: Inventory of .7z Files. If you’ve already read it feel free to skip to the main content.

In order to dive into what was suppose to be the next part about the “Stuff For Mike” video (but now you’re stuck here), it’s important that you understand exactly which .7z files will be discussed in the next article because it can get fairly confusing.

First, the .7z files have been discussed ad nauseam throughout this series and I highly recommend that you read The Rabbit Files 4.2: More on the .7z Files for a more detailed background. The technical name for the .7z files is “7dc58-ngp-van.7z” or “ngp-van.7z” for short. I’ve shortened it even further throughout the Rabbit Files to .7z but at the end of the day, it’s all the same files.

On September 13, 2016, an organizer at a cyber conference in London presented a PowerPoint that contained the link and password to the .7z files that allegedly originated from Guccifer 2. Later that same day, WikiLeaks tweeted out the link and password to the files.

Approximately 30 minutes later, @NatSecGeek posted a torrent of the files on Pastebin and WikiLeaks retweeted that, too. About 2 hours after Wikileaks’ first tweet, they posted another link to the files, this time to a 678.4 MB batch uploaded to Mega Upload.

These are what I would consider the original public releases of the file: The cyber conference’s Powerpoint, WikiLeaks’ tweet containing the link and password, @NatSecGeek’s Pastebin, and the Mega Upload link. Now here’s a look at the .7z files we’re going to be dealing with in the next Rabbit Files.

1. (1.11 GB)

This is the copy of the files that White Rabbit gave to Trish Negron on or around July 1, 2017. Later that evening, Negron gave the files to George Webb and Jason Goodman who then went live with the information via their Youtube channel, Crowdsource the Truth.

2. 7dc58-ngp-van.7z (542.7 MB)

This is a copy of the files that was uploaded to Mega Upload by Defango either during or shortly after the Crowdsource the Truth livestream. This is also the copy that sparked Goodman’s question, “Who spoofed the Seth Rich files?” Yesterday, Defango confirmed that these files were uploaded by him but in the “Stuff For Mike” video, which was recorded on or around July 2, 2017, Goodman had no idea who uploaded them.

Defango also posted a screen shot of some other files on his computer called 7dc58-ngp-van.7z (542.69 MB) which match (size and name) the files he uploaded to Mega Upload. I have no idea if the content was the same but again, the file size and name match (the file size was simply rounded up to 542.7 MB when uploaded to Mega Upload). You don’t necessarily have to remember this second file (the 542.69 MB .7z file), it’s just something to keep in mind about the files matching.

3. (1.04 GB)

This is the file that Defango personally sent to Goodman after Rabbit gave Negron his own copy of the files, per Goodman. As for which happened first, all I know is that in the “Stuff For Mike” video, Goodman is aware of both the .7z files that Defango says he uploaded to Mega Upload (#2 on this list) and these files that Goodman said Defango sent to him directly.

4. 7dc58-ngp-van.7z (678.4 MB)

This is the Mega Upload file mentioned above that WikiLeaks tweeted out after posting their own link and @NatSecGeek’s torrent. If you look at the comments underneath WikiLeaks tweet you’ll see that a lot of people could not open the file.

Now What?

First, remember that just because the files have different endings (.7z versus .zip) and different file sizes, it doesn’t necessarily mean the content of the files differed from one another. .7z and .zip are just two different ways you can compress files. There’s nothing sketchy about files that end with this just by looking at them.

However, I have no idea if the difference in compression software led to the difference in file sizes. I’m simply pointing out that a difference between a .7z and .zip file doesn’t necessarily mean someone “spoofed the files.” For all I know, the type of program you use to unzip files might play a role in file sizes, too. I have no idea, I’m not a tech nerd.

The first .7z file I listed above (#1 on the list at 1.11 GB), again, is the file that White Rabbit gave Trish Negron who then passed it along to Jason Goodman and George Webb. Goodman and Webb then did a livestream during which time Negron uploaded Rabbit’s files to Google docs. There were issues with opening the files so Negron sent the files to Goodman who unzipped and posted them online.

At some point during the livestream, Goodman stated that Kim Dotcom uploaded Rabbit’s files to Mega Upload but according to Defango, he’s the one who uploaded them, not Dotcom. These are the files that are listed as #2 on the list and the cause of everything unholy that followed the livestream.

Defango’s Copy of the Files

Because the 7dc58-ngp-van.7z (542.7 MB) files that Defango says he uploaded to Mega Upload became the catalyst for the ensuing “Who spoofed the Seth Rich” shitstorm, let’s take a look at when and where Defango got this copy of the files. Here’s the conversation that took place on Twitter yesterday between he and I (my emphasis):

Defango: “Excuse me Jimmy’s llama but I never once said that the Seth rich files were Seth rich files whatsoever. I was the only person who correctly called them out as fake guccifer 2.0 files. Literally try to make up more bullshit”

Me: “Is this account run by Manny Chavez? If so, do you know who uploaded the .7z files to Mega that only had 542.7 MB and when it was uploaded? Correct, I’m not aware of Chavez ever saying they were the Seth Rich files nor does my website state that anywhere.”

Defango: “I did after Jason passed out his version, I uploaded the copy I had directly from the torrent files from the OG torrent dump. You can see I also have the torrent from September 2016

Me: “Gotcha. So when Goodman was going after you over this whole ‘who spoofed the files’ he was talking about this 542 MB file you uploaded to Mega, not the same files that Dotcom uploaded in 2016 (and frankly I don’t even think KDC uploaded them to Mega ever but I maybe I’m wrong).”

Defango: “Yes he said I spoofed his file somehow with the original 7z file from the original torrent of it uploaded for sharing all the way back in 2016. George opened the file and extracted thing and that was their version of the file.”

Me: “Do you remember if the torrent you downloaded was the same one that The Forensicator downloaded from @NatSecGeek. Here’s her pastebin for it, it was posted the same day that the link/password to files was released (2016).”

Defango: “Looks like the same one. Torrent is from the same day. I remember because I was doing videos about it when it came out and saved a copy in my mega when it came out.

I downloaded the Torrent itself on 7/10/2017 after the mess happened just incase I needed it later. I uploaded this copy of the files directly from my computer witch still had it from 2016

Me: “Makes sense. The screenshot below was taken from video recorded by Goodman on June 2nd. It shows the file that you said earlier you uploaded to Mega. If you didn’t download torrent until 7.10.17, where did you get this file below?”

Defango: “As I said I’ve had it since it came out in 2016. I got it from the same toward file that sitting below it I just didn’t upload a copy of the tour in till later pretty easy to figure that out”

Me: “Thank you for clarifying. So you downloaded files via torrent in 2016, uploaded that torrent file to Mega after the thumb drive debacle went down, and then you went back to the torrent and downloaded a copy to be safe. Is that right?”

Defango: “Ya just to see if you could still download it. Still needed the same password”

Now here are some of the things that Defango said back in 2017 (my emphasis):

LTV: Explain what the crux of it was, this file (.7z files). Explain what happened and why we’re talking.”

Defango: “Okay, the reason that we’re talking right now is because a couple weeks back on my stream I made a request to people, they were like, ‘Hey, we want to see you do something besides puzzles’ and I was like ‘Hey, you know, if you guys really want to do me a service somebody find me the Guccifer 2 files and collect all this stuff that has to do with ‘Stuff For Mike’ folder…redistricting.

Like, I asked for a bunch of different files and I had gotten, like, uh, a group of these files sent to me through Mega or whatever and I downloaded it, never really messed with it actually, like I kinda forgot that I had it on my computer completely and it wasn’t up until I was sitting on the show with Fade to Black…that everybody was telling me that there was this like this new Seth Rich file that was suppose to be coming out…

…So I tuned in [to Crowdsource the Truth’s livestream], I started watching, they started sharing the files or whatever [the files Rabbit gave to Negron], you know, I was able to download their version of the files from CS the Truth. I gave them a Mega Link, I got in contact with Jason Goodman right away…and I was like, ‘Hey, here’s this but, you know, here’s actually the original files…” (Source: Lift The Veil, “6.5.2017: LIVE w/ Defango – George Webb, Jason Goodman & Seth Rich Saga,” 5:20 mark)

“I was like ‘Hey guys, wasn’t that stuff [White Rabbit’s 8-month old, worthless, publicly available files] for me? You know, wasn’t that the stuff I asked for that we were going to start investigating, you know, into the DNC leaks…'”
(Source: Lift The Veil, “6.5.2017: LIVE w/ Defango – George Webb, Jason Goodman & Seth Rich Saga,” 10:00 mark)

“The files [White Rabbit’s 8-month old, worthless, publicly available files] were meant for me and my investigation so we could be looking [unintelligible] farther but, you know, hey, I requested, you know, certain types of information not be in there but it looks like some of the dat files and stuff that are very, very old weren’t looked at…bad information basically put out there.” (Source: See upcoming article)

Right. So Defango just happened to ask his followers for the exact two things found in the .7z files that White Rabbit discussed with Crowdsource the Truth—out of an entire 542 MB file, no less (yes, as of now I believe the files Defango uploaded to Mega were probably the same files originally released). And how did he know about the “Stuff For Mike” folder if he had to solicit people for the files? Did someone tell him about it? If he already had the files, which he claimed yesterday that he downloaded almost a year prior, why would he have to ask people to send them to him?

Bogaerts Peddles Files During Same Time Period

Additionally, it just so happens that Trish Negron said that White Rabbit’s BFF, Beth Bogaerts (@HumanOfMind), was peddling the files during the exact same time period that Defango was soliciting his followers for them. In a May 30, 2017 tweet (below) she sent to Jared Beck in an attempt to get him to bite on the files, Bogaerts wrote, “I have a friend with this information about voter data NGPVAN.”

Folks, this was covered in a previous Rabbit Files. Just because Guccifer 2 named the files “ngp-van.7z” that doesn’t mean they came from NGPVAN. In fact, they didn’t. These files were old and virtually meaningless.

This wasn’t the first time nor the last that Guccifer 2 misrepresented documents. In October 2016, the very next month after they (allegedly) dropped the ngp-van.7z files, they released a batch of documents claiming they were from the Clinton Foundation. And yeah, no, they weren’t. Guccifer 2 was a liar in case you didn’t get the memo.

Nope, Guccifer 2 sure didn’t:

So going back to that tweet Bogaerts posted, here she was peddling NGPVAN files to people like Jared Beck that weren’t even NGPVAN files. She also attached four screenshots to the tweet including one about “Crosscheck,” which we just discussed in my last article because it was one of only three things (Crosscheck, redistricting, tech jobs) that White Rabbit talked about with Crowdsource the Truth regarding the “Stuff For Mike” folder. Again, the same stuff from an entire 542 MB file. One of the other screenshots she attached to the Jared Beck tweet was a private message sent that read:

“I can send the [sic] with an email on wetransfer
its 1.2 gig

And here’s Bogaerts telling Defango that Rabbit’s files came from Imagine that.

Don’t forget that it was also Bogaerts who told Defango that she peddled the files to other people before she and others (“we”) spoke to him about the documents via the “James”/Vetter” Twitter account, an account that Bogaerts later claimed was controlled by Thomas Schoenberger.

With that said, I’m sure she’ll blame someone else for her file peddling despite the fact she’s literally the only one involved in this monkey pit that has spent years proclaiming herself a master guru of all things documents like the exact ones Guccifer 2 dropped.

On August 31, 2018, Bogaerts wrote on Twitter, “If you can’t be responsible with information then you shouldn’t use it.” Indeed.

A Year In the Making

So how did we get to this point where Defango was asking people to send him worthless files while Rabbit and Bogaerts were peddling the same “not-even-chickenfeed” documents? The following is not going to provide any concrete answers about that or “Who spoofed the Seth Rich files,” although I’ve come to the (current) conclusion that I don’t think any of the files were actually spoofed. Do I think that Negron, Webb, and Goodman got played? Absolutely. Without a doubt. 100%.

But spoofed? Meh, I’m not so sure.

And if you’re wondering why I haven’t really covered the role that “James”/”Vetter” (who some claim was Thomas Schoenberger) allegedly played in the Seth Rich thumb drive incident, it’s because there’s virtually no information that’s been leaked or posted about his involvement. Can’t publish what I don’t have but I’m sure WikiLeaks supporters involved in this debacle and their (paid?) minions will undoubtedly (and ironically) cry about this.

So let’s go over a short history of how we got to the White Rabbit thumb drive debacle in the first place. According to both Bogaerts and White Rabbit, they’ve been friends for a long time. More specifically, close friends since before June 2016:

Bogaerts has also known Negron since 2016, and was tweeting with the “James”/”Vetter” account since August 2016, if not sooner (“James” is @ExpInfiltrators below):

In addition, Bogaerts was promoting Cicada 3301 via Twitter by early November 2016, meaning not only did she support it before she claims she even know about it, she clearly lied about when she was first introduced to it. Records also show that she was either introduced to it by someone other than Schoenberger or she knew him earlier than she’s let on.

In September 2016, Bogaerts knew about the cyber conference where Guccifer 2’s PowerPoint with the link and password to the .7z files was first presented and she promoted it five days before the event:

At the time, she was in a group with White Rabbit called “Strength In Unity.” When the .7z files were released to the public (via WikiLeaks and @NatSecGeek) Bogaerts said that Rabbit downloaded the files. Rabbit also confirmed in 2018 that he downloaded the files.

She also said that at some point Rabbit approached her about the files and in the weeks leading up to the White Rabbit thumb drive incident (June 1, 2017), Trish Negron alleged that Bogaerts was peddling the files to multiple people. This has been confirmed by Bogaerts herself.


Again, during this same time period Defango claims he was soliciting the very same files that someone eventually sent him. What I don’t understand is Bogaerts’ message to Defango post-White Rabbit/thumb drive/Crowdsource the Truth livestream dumpster fire where she says, “So as you know Rabbit came to me [with the files]…”

So as you know…” How and when exactly did Defango know that Rabbit approached her with the files and how did Bogaerts know that he knew that? According to her, she didn’t even meet him until a few days before the thumb drive incident went down. Was this through the James/Vetter account?

After Bogaerts introduced White Rabbit to Negron, he gave her the files on or around June 1, 2017. She then passed them along to George Webb and Jason Goodman. Defango later said that “we” warned Rabbit not to hand over the files as if he was well aware of the situation before it even went down, contradicting other statements he’s made in the past.

I realize this is a lot of convoluted, idiotic, garbage LARP material to take in and I am not able to provide you with any definitive answers about who initiated what and when. However, this gives a little more insight into how this LARP started and with who but there’s still some obvious gaps in the story. At least everyone now has a better understanding about the different .7z files handled by different people which is fairly important to understand for the next article.

Post Disclaimer

This is an Op-ed article. The information contained in this post is for general information purposes only. While we endeavor to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information contained on the post for any purpose. The owner of this blog makes no representations as to the accuracy or completeness of any information on this site or found by following any link on this site.

The views or opinions represented in this blog do not represent those of people, institutions or organizations that the owner may or may not be associated with in professional or personal capacity, unless explicitly stated. Any views or opinions are not intended to malign any religion, ethnic group, club, organization, company, or individual.

The owner will not be liable for any errors or omissions in this information nor for the availability of this information.  The owner will not be liable for any losses, injuries, or damages from the display or use of this information.

Leave a Reply