Page:Report On The Investigation Into Russian Interference In The 2016 Presidential Election.pdf/54

 The Office was able to identify when the GRU (operating through its personas Guccifer 2.0 and DCLeaks) transferred some of the stolen documents to WikiLeaks through online archives set up by the GRU. Assange had access to the internet from the Ecuadorian Embassy in London, England.

On July 14, 2016, GRU officers used a Guccifer 2.0 email account to send WikiLeaks an email bearing the subject "big archive" and the message "a new attempt." The email contained an encrypted attachment with the name "wk dnc link1.txt.gpg." Using the Guccifer 2.0 Twitter account, GRU officers sent WikiLeaks an encrypted file and instructions on how to open it. On July 18, 2016, WikiLeaks confirmed in a direct message to the Guccifer 2.0 account that it had "the 1Gb or so archive" and would make a release of the stolen documents "this week." On July 22, 2016, WikiLeaks released over 20,000 emails and other documents stolen from the DNC computer networks. The Democratic National Convention began three days later.

Similar communications occurred between WikiLeaks and the GRU-operated persona DCLeaks. On September 15, 2016, @dcleaks wrote to @WikiLeaks, "hi there! I'm from DC Leaks. How could we discuss some submission-related issues? Am trying to reach out to you via your secured chat but getting no response. I've got something that might interest you. You won't be disappointed, I promise." The WikiLeaks account responded, "Hi there," without further elaboration. The @dcleaks_ account did not respond immediately.

The same day, the Twitter account @guccifer_2 sent @dcleaks_ a direct message, which is the first known contact between the personas. During subsequent communications, the