Newly disclosed FBI documents show that Thomas Matthew Crooks, the 20-year-old who attempted to assassinate Donald Trump at a July 2024 rally near Butler, Pennsylvania, used the alias “Bob Dole” to order packages containing gun parts and tools delivered to his parents’ home.

The records, provided to Senate Judiciary Committee Chairman Chuck Grassley as part of his ongoing investigation, detail how Crooks instructed his father on using VPNs and secure browsers to conceal online activity after a family bank account was hacked. Packages sent under the pseudonym included “parts, tools and items to increase the capacity of his rifle,” the same weapon his father later provided on the day of the attack.

Crooks’ father, Matthew Crooks, told investigators that his son retrieved the deliveries before he returned home from work. The documents note that Crooks believed using a pseudonym would prevent hacking, despite his father’s warnings that purchases remained linked to real bank accounts.

In a separate revelation from the same files, a family attorney informed investigators that an anonymous donor paid for Crooks’ cremation shortly after the shooting. The body was released and cremated approximately 10 days following the July 13, 2024, incident, a timeline that had previously drawn scrutiny from Republican lawmakers.

The documents add to the picture of Crooks as a socially isolated individual who took extensive steps to hide his preparations. Investigators have maintained that Crooks acted alone, with no evidence of foreign or domestic assistance. The identity of the anonymous donor remains unknown, and the records do not link the payment to any broader conspiracy.

These latest details emerge from federal interviews conducted in the days after the attack and reviewed by multiple outlets. Grassley’s probe continues to examine security failures and investigative shortcomings surrounding the Butler rally shooting. The shooting killed one attendee; Trump and two others were wounded.