I'm aware that the "Multi-Stage Fingerprint Fabrications" article assumes a fair bit of technical knowledge to follow through and I'm also seeing some try to explain the processes and not communicate them as well (or accurately) as could be done.
So, here are processes that appear to have been used to construct Guccifer 2.0's first 5 documents (very likely starting at 1:38pm on June 15th but that's not an essential point for the sake of proving the fabrication efforts):
"1.doc", "2.doc" & "3.doc"
Based on the version numbers and editing time, it now appears that the specific procedure used, involved the following:
On a PC with a copy of MS-Word registered to "Warren Flood", a blank template file is created with a Russian stylesheet in it.
Approximately 30 minutes later, someone using the name "Феликс Эдмундович" carries out the following actions:
Even if we ignore Flood's name as creator and assume that an original document was opened at first and then had a Russian stylesheet entry added by accident, it would not explain the same stylesheet entry correlation (with identical RSID) in the second and third documents.
On a PC with a copy of MS-Word registered to "user", an original document was opened and saved-as "4.doc".
(It appears this was done in between the initial and second phases of fabricating the first 3 documents.)
On the PC with a copy of MS-Word registered to "Феликс Эдмундович" an original document is opened and then saved as "5.doc".
For both "4.doc" and "5.doc", the original creator/author name being retained but the creation and last modification timestamps matching the modification time - is how we can tell how those the files were handled - if you experiment writing out RTF-format documents in MS-Word under various circumstances you'll see this result only occurs under the same set of circumstances)