135 Investigative Technique█ █ █ █ █ █ █ █ █ █ See SM-2589105-GJ, serial 649. As part of its investigation, the FBI later received images of DNC servers and copies of relevant traffic logs. Netyksho Indictment ¶¶ 28-29. 136 Netyksho Indictment ¶ 29. The last-in-time DNC email released by WikiLeaks was dated May 25, 2016, the same period of time during which the GRU gained access to the DNC’s email server. Netyksho Indictment ¶ 45. 137 Netyksho Indictment ¶ 35. Approximately a week before the registration of dcleaks.com, the same actors attempted to register the website electionleaks.com using the same domain registration service. Investigative Technique█ █ █ █ █ █ 138 See SM-2589105, serial 181; Netyksho Indictment ¶ 21(a). 139 Investigative Technique█ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ 140 See, e.g., Internet Archive, “https://dcleaks.com/” (archive date Nov. 10, 2016). Additionally, DCLeaks released documents relating to Personal Privacy█ █ █ █ █ █ █ █ █, emails belonging to PP█ █ █ █ █ █, and emails from 2015 relating to Republican Party employees (under the portfolio name “The United States Republican Party”). “The United States Republican Party” portfolio contained approximately 300 emails from a variety of GOP members, PACs, campaigns, state parties, and businesses dated between May and October 2015. According to open-source reporting, these victims shared the same Tennessee- based web-hosting company, called Smartech Corporation. William Bastone, RNC E-Mail Was, In Fact, Hacked By Russians, The Smoking Gun (Dec. 13, 2016). 141 Netyksho Indictment ¶ 38. 142 See, e.g., Facebook Account 100008825623541 (Alice Donovan). 143 7/14/16 Facebook Message, ID 793058100795341 (DC Leaks) to ID Personal Privacy█ █ █ █ 144 See, e.g., 9/14/16 Twitter DM, @dcleaks_ to Personal Privacy█ █ █ █ █ █ █ █ █; 9/14/16 Twitter DM, @dcleaks_ to Personal Privacy█ █ █ █ █ █ █ █ █. The messages read: “Hi https://t.co/QTvKUjQcOx pass: KvFsg%*14@gPgu& enjoy ;).” 145 Dmitri Alperovitch, Bears in the Midst: Intrusion into the Democratic National Committee, CrowdStrike Blog (June 14, 2016). CrowdStrike updated its post after the June 15, 2016 post by Guccifer 2.0 claiming responsibility for the intrusion. 146 Netyksho Indictment ¶¶ 41-42. 147 Releases of documents on the Guccifer 2.0 blog occurred on June 15, 2016; June 20, 2016; June 21, 2016; July 6, 2016; July 14, 2016; August 12, 2016; August 15, 2016; August 21, 2016; August 31, 2016; September 15, 2016; September 23, 2016; October 4, 2016; and October 18, 2016. 148 6/27/16 Email, [email protected] to Personal Privacy█ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ (subject “leaked emails”); IT█ █ █ █ █ █ █ █ █. 149 6/27/16 Email, [email protected] to Personal Privacy█ █ █ (subject “leaked emails”); IT█ █ █;

Mueller Report PDF - Page 82 Mueller Report PDF Page 81 Page 83