1.

My name is Konstantinos “Gus” Dimitrelos, I am over eighteen years of age and have
personal knowledge of all facts and circumstances set forth herein.
2. I have reviewed a hard drive provided to me by Washington Examiner Investigative
Reporter Andrew Kerr.
3. I am a retired US Secret Service agent and began cyber forensics in 1996 getting certified
by the Royal Canadian Mounted Police and US Treasury CIS2000 program.
4. In addition to 11 other Secret Service agents, I was the first in the United States to
become certified as a computer forensics specialist and have been conducting forensics
examinations while employed or contracted by various government agencies and in the
private sector continuously for 26 years.
5. While in the US Secret Service (USSS) I performed numerous cyber investigations and
was a USSS lead investigator for the Canadian/USA Northeast Blackout of 2003 and
Technical Security Coordinator for the 2002 Salt Lake City Winter Olympics.
6. I am certified in International, US Federal and US State Courts as a Digital Evidence
Forensic Expert.
7. I have been contracted since 2007 by the US Department of Justice-US Attorney’s Office
(DOJ-USAO) to conduct cyber investigations and cyber and cellular forensics and
collect, examine, investigate and testify in cyber and cellular cases for all federal
agencies and more than 40 state and local police departments.
8. I have conducted more than 3,000 forensics exams, trained over 2,000 law enforcement
personnel and have testified more than 100 times in state, federal, international courts and
depositions.
9. I am certified in US Federal and US State Courts as an Expert in Cellular Historical Data
Reconstruction (Cellular Triangulation) which is the analysis of Call Detail Records.
10. I have performed thousands of Call Detail Records Examinations from all major
providers including TMobile, Verizon, AT&T, Sprint and others.
11. I am certified in US Federal and US State Courts as an Expert Geo-location evidence
from photographs, GPS units, vehicles, social media and other location based
technologies.
12. I conduct network-based forensics and data breach investigations in various environments

1
 including Linux, PC and macOS environments.
13. I am a Certified Ethical Hacker and perform penetration testing and vulnerability
assessments.
14. I am an instructor for the Regional Counterdrug Training Academy and authored the
Cellular Triangulation and Mobile Device Forensics course for Law Enforcement which
focuses on Call Detail Records analysis for all major providers and mobile device
forensics on Android and iOS devices.
15. I am a US Department of State contracted lead instructor, course developer and cyber
program coordinator for the Global Cyber Anti-Terrorism Assistance program (GATA).
16. I perform cyber forensics, mobile device forensics and/or cellular triangulation services
for corporations including Toyota Tsusho of America, DHL, State Farm and Allstate.
17. I have attached my current Curriculum Vitae to this Affidavit report.

Cyber Forensics Request Background

18. On April 5, 2022 I received an unsolicited request for forensics services from Washington
Examiner Investigative Reporter Andrew Kerr.

2
 19. Continuing from my forensics report dated May 20, 2022, I was requested to locate
additional data which would further verify Robert Hunter Biden is the only owner and
user of the MacBook Pro Laptop.
20. The May 20, 2022 report reflects a fraction of unique RHB identifiable data and this
report is a continuance and should be treated as such.

Apple Store Purchases

21. On January 21, 2019 the Apple Store transaction file was created and saved in the
Downloads folder.
a. Users/roberthunter/Downloads/Apple Media Services
information/Apple_Media_Services/Stores Activity/Account and Transaction
History/Store Transaction History.csv
2. The file contained over 2,000 purchases by Robert Hunter Biden and dozens of purchases
of burner phone apps which are used to generate alternate phone numbers capable of
making calls and texting from a primary mobile device such as an iPhone or iPad.
3. The below transactions reflect the purchases of these burner phone apps since 2015.

Invoice Date Apple ID Seller Item Description Device IP Document Order Number Billing Payment
Number Address Number Information ID Type

4/18/2018 Phoner 2nd Phone Second Line 72.37.128.114 155205444112 MS9JJS28HV MasterCard
Number Text Yearly

3/23/2018 Phoner 2nd Phone Second Phone 107.77.224.201 115202146938 MS9HHQLSDM MasterCard
Number Text Number Yearly

8/30/2017 Phoner 2nd Phone Silver Pack 70.214.107.230 115175045680 MS94NJ7K7L Visa
Number Text

8/30/2017 Phoner 2nd Phone Silver Pack 70.214.107.230 115175045680 MS94NJ7K7L Visa
Number Text

8/30/2017 Phoner 2nd Phone Silver Pack 70.214.107.230 115175045680 MS94NJ7K7L Visa
Number Text

10/7/2016 textPlus: Unlimited Remove Banner 208.167.254.103 174138881240 MS8T4WKD5Q Visa

Text+Calls Ads for 1 Month

8/16/2016 textPlus: Unlimited Unlimited 108.51.174.69 137133983168 MS8QNBZ353 MasterCard

Text+Calls Mexico Calls

8/3/2016 textPlus: Unlimited Unlimited Calling 24.12.87.222 125132793206 MS8Q5MSWD9 MasterCard

Text+Calls US & Canada

7/20/2016 textPlus: Unlimited Unlimited 108.51.174.69 143131988410 MS8NTHQJNS MasterCard

Text+Calls Mexico Calls

6/29/2016 textPlus: Unlimited Unlimited Calling 24.12.87.222 155130172562 MS8N8MV8MQ Store

Text+Calls US & Canada Credit

6/20/2016 textPlus: Unlimited Unlimited 108.51.174.69 162129673269 MS8MYS511Y MasterCard

Text+Calls Mexico Calls

3
5/31/2016 textPlus: Unlimited Unlimited Calling 24.12.87.222 124127651806 MS8MB33JS6 MasterCard
Text+Calls US & Canada

5/16/2016 textPlus: Unlimited $21.90 in textPlus 108.51.174.69 210126466290 MS8M0FL3B1 MasterCard

Text+Calls Credit

5/16/2016 textPlus: Unlimited Unlimited 108.51.174.69 210126466289 MS8M0F3MTK MasterCard

Text+Calls Mexico Calls

5/2/2016 textPlus: Unlimited Unlimited Calling 24.12.87.222 203125561374 MS8L8Z45BS MasterCard

Text+Calls US & Canada

3/30/2016 textPlus: Unlimited Unlimited Calling 24.12.87.222 154122875741 MHD01DQS9W Visa

Text+Calls US & Canada

3/2/2016 textPlus: Unlimited Unlimited Calling 24.12.87.222 203120714409 MHBZ59WLHN Visa

Text+Calls US & Canada

1/31/2016 textPlus: Unlimited Unlimited Calling 24.12.87.222 131118067384 MHBY72H6QY Visa

Text+Calls US & Canada

12/30/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 140115673396 MHBXL68XTV Visa

Text+Calls US & Canada

11/29/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 217113300666 MHBX0H1KZT Visa

Text+Calls US & Canada

11/2/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 162111631423 MHBWHQ1G1X Visa

Text+Calls US & Canada

10/3/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 115109826212 MHBW1KXJWQ Visa

Text+Calls US & Canada

8/30/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 201106833366 MHBVHJ556G Visa

Text+Calls US & Canada

8/2/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 174105329751 MHBV0DDK6F MasterCard

Text+Calls US & Canada

6/28/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 128103004109 MHBTN2BWNH MasterCard

Text+Calls US & Canada

5/28/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 190101007969 MHBT55HN3S MasterCard

Text+Calls US & Canada

4/30/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 165099231087 MHBSWB29MZ MasterCard

Text+Calls US & Canada

4/5/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 140097737539 MHBSFVW7BY MasterCard

Text+Calls US & Canada

3/1/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 167095360672 MHBS3S1KGM MasterCard

Text+Calls US & Canada

2/2/2015 textPlus: Unlimited Unlimited Calling 24.12.87.222 205092825366 MHBQT9G2X8 MasterCard

Text+Calls US & Canada

12/30/2014 textPlus: Unlimited Unlimited Calling 24.12.87.222 183090865387 MHBQGG5WLZ MasterCard

Text+Calls US & Canada

11/30/2014 textPlus: Unlimited Unlimited Calling 24.12.87.222 162089014109 MHBQ3NMK1J MasterCard

Text+Calls US & Canada

4
10/30/2014 textPlus: Unlimited Unlimited Calling 24.12.87.222 211086513775 MHBNS3HMXV MasterCard
Text+Calls US & Canada

10/26/2014 textPlus: Unlimited $1.99 in Calling 166.170.32.101 129086438202 MHBNQ7QVD1 MasterCard

Text+Calls Credits

10/4/2014 textPlus: Unlimited Unlimited Calling 24.12.87.222 155085046121 MHBNFBKT5T MasterCard

Text+Calls US & Canada

8/31/2014 textPlus: Unlimited Unlimited Calling 24.12.87.222 151082963651 MHBN2YLB8H MasterCard

Text+Calls US & Canada

7/30/2014 textPlus: Unlimited Unlimited Calling 24.12.87.222 130081492754 MHBMQQQNV MasterCard

Text+Calls US & Canada G

7/2/2016 WePhone - free phone $10 credit and 50.191.117.115 165130462176 MS8NF39LJ3 Store
calls & international $0.5 bonus Credit
calling

6/29/2016 WePhone - free phone $10 credit and 108.51.174.69 183130277307 MS8N9STWWS Store
calls & international $0.5 bonus Credit
calling

4. The above Apple Store transactions also correlate with receipts sent by Apple to the
Billing address: Robert Biden rspdc.com and icloud.com.

5
6
Burner Phone Applications
5. The Phoner App for iOS has many features as shown below:

6. Phoner was authenticated from the RHB personal gmail.com account on

August 18, 2018

7
7. In addition to buying burner phone apps, there is evidence on the MacBook Pro hard
drive that Phoner was used to record a call and save the audio file titled Recording.mp3

8. Once downloaded, RHB emailed the voicemail attachment to an unknown person as well
as sending to his own icloud.com and rspdc.com accounts.

8
 9. The audio file, which is still embedded with the received and sent emails, is located in the
Apple Mail folder in the following paths.
Name Path

Recording.mp3 roberthunter/Library/Mail/V6/71BA9E8B-8351-4053-88F6-3A2F8DC2E4E1/Sent
Messages.mbox/E9273EF6-B8ED-4DF2-A955-34538DD822C2/Data/1/1/Messages/

Recording.mp3 roberthunter/Library/Mail/V6/71BA9E8B-8351-4053-88F6-3A2F8DC2E4E1/INBOX.mbox/E9273E
F6-B8ED-4DF2-A955-34538DD822C2/Data/8/Messages/

10. The audio recording is approximately 8 minutes and 16 seconds long and involves RHB
and a female he calls Hallie.
11. The purchases from Apple Store were made from various Credit Cards partially listed
and redacted below and matching photographed credit cards and Apple receipts located
on the laptop. These photographs were taken using the Apple X iPhone and demonstrate
the sandwiching of digital and physical events .

9
Photograph EXIF Data:
Make - Apple
Model - iPhone X
Software - 12.1
DateTimeDigitized - 2018:09:25 11:29:27

10
Photograph EXIF Data:
Make - Apple
Model - iPhone 6
Software - 9.3.2
DateTimeDigitized
2016:07:20 11:24:37

11
Possible Hacking and PII Theft
12. In addition to using the burner phone app ‘Phoner’ to call and record a conversation with
a female named ‘Hallie’, Robert Hunter Biden purchased and used an iPhone imaging
tool titled Dr. Fone. Dr. Fone is designed by the company Wondershare.
13. This application is capable of extracting data from an iPhone or iPad and was purchased
by RHB on May 6, 2017 using his rspdc.com email account and Paypal.

12
14. RHB later emailed the original purchase and license from his rspdc.com email to
his other icloud.com account.
15. Once purchased, Dr. Fone was installed to the MacBook Pro Laptop hard drive in the
Applications folder and all extractions were saved to the \roberthunter\downloads\folder.

16. Dr. Fone, according to Wondershare, is a complete mobile solution and capable of iPhone
data backup.

17. During my analysis of the RHB MacBook Pro Laptop hard drive I discovered RHB was
using Dr. Fone to access and copy data from many iPhones and iPads and save those iOS
extractions into his Documents folder.
18. RHB began extracting data from the Hallie iPhone(s) using Dr. Fone on or about May 31,
2017 through November 11, 2017

13
19. In order to extract data from a mobile device such as an iPhone or iPad the person
conducting the extraction must have a legal right to do so and must have the physical
device in their hand in order to connect it to the computer to use the installed program.
20. The Dr. Fone user must connect the iOS device(s) to the Laptop using an Apple lightning
cable, run the software, extract the contents from the device(s) then save the data.
21. In my expert opinion, without legal or authorized consent the person accessing someone
else's computer device and performing the extraction of the data may be in violation of
multiple Federal Statutes including 18 USC 1030 and 18 U.S. 2511 for unauthorized
access of a computer system and/or interception of an electronic communication.
22. As part of my cyber forensics position within the US Secret Service Electronic Crimes
Special Agent Program (ECSAP) it was one of our core investigative responsibilities to
investigate violations of 18 USC 1030.
23. I do not have any personal knowledge of whether the iPhone extractions I located on the
RHB Laptop were consentual or illegal; however, accessing the devices would also
require knowledge of the Pin code in order to unlock the device.
24. Specifically, RHB using Dr. Fone manually connected iPhones belonging to ‘Hallie’ and
‘Howard’ and an iPad Pro and extracted the following information:
a. Messages
b. Voicemail
c. Call Logs
d. Photographs
e. Videos
f. Notes
g. Safari Browser
h. Calendar
25. There were over 100,000 iOS files and artifacts, which included hundreds of personal
voicemails, extracted by RHB using Dr. Fone.
26. These include financial records such as Credit Card Statements which were saved to the
/roberthunter/Documents/untitled folder/ path. This folder contained numerous Hallie
Biden American Express statements.

14
27. Specifically, there were over 120 Voicemails extracted from Hallie backups and located
in various folders sorted by collection dates.
28. One example is the folder \roberthunter\Documents\dr.fone toolkit for iOS\Hallie phone
11-16-2017 at 12.00.48\Voicemail
29. One extracted voicemail titled roberthunter/Documents/dr.fone toolkit for iOS/Hallie
phone 11-16-2017 at 12.00.48/Voicemail/Unknown 11-03-2017 08.40.41.amr was a
lengthy voicemail left by RHB to Hallie.
30. The Screenshot below shows the captured iOS devices and folder names which also
coincide with the extraction date and time.

15
31. Once the mobile devices were connected to the Laptop, RHB extracted data from the
Hallie iOS devices, accessed the captured data and later copied it to other files.
32. One example is a file RHB accessed from the Henry iPhone Dr. Fone extraction.
33. The file was created on 01-26-2017 07:42:11 UTC timezone and located in the folder
/roberthunter/Documents/Henry’s iPhone's iPhone 6s/2017-01-26/Call History/CSV/ and
titled Call History.csv.
34. Once RHB opened the file, he highlighted the David Walsh call history.

35. This Apple Grab file (Screenshot) was captured and created by RHB on September 20,
2018 at 18:13:51 UTC timezone.
36. Grab is a utility program in macOS for taking screenshots. (Note: ​Grab has been replaced
by Apple Screenshot in current macOS)
37. RHB also created and stored an iCloud notes file on David Walsh titled
/roberthunter/Downloads/iCloud Notes.zip»iCloud Notes»Notes»David Walsh
302####### 02-17-2017 01:05 Outgoing Wilmington, DE 5 seconds
38. There were additional Apple Grab files created and stored which further identify RHB
was in possession when creating the screenshots and possessed the Keychain password to
reveal application password such as the screenshot below demonstrates.

16
39. Continuing on September 20, 2018 RHB sent and received emails regarding the transfer
or funds, updated his Apple Information prior to David Walsh screenshot.

17
18
 40. There are captured voice messages I was asked to determine the dates of creation and are
listed below with the file path. These voicemails on Hunter Biden's hard drive show
Hallie Biden received a voicemail from an unknown woman thanking her for intervening
in a matter involving "Uncle Jack," an apparent reference to Jack Owens, Joe Biden's
brother-in-law through his sister Valerie. Emails on the hard drive show Owens had
reached out to Hunter Biden in 2014 for help securing a business license in the country.
Hunter Biden replied at the time, "Working on it - back to you ASAP."
\roberthunter\Documents\dr.fone toolkit for iOS\Hallie phone (iPhone 6s) 06-19-2017 at
14.02.09\Voicemail\fe70b5cab4b9ce4183cdb42adc3bf227feaa6c3b.amr"
Created: 6/19/2017 6:06:02 AM (2017-06-19 12:06:02 UTC)

41. Joe Biden's brother, Jim Biden, also left multiple voicemails on Hallie Biden's phone,
including one that referenced Hunter Biden's business dealings.
\roberthunter\Documents\dr.fone toolkit for iOS\Hallie phone (iPhone 6s) 10-28-2017 at
22.30.14\Voicemail\6c3ae4b3a1b507bc56198db77c657f3a35b39b5f.amr
Created: 10/28/2017 8:09:34 PM (2017-10-29 02:09:34 UTC)

Hunter’s iPad
42. The device name ‘Hunter’s iPad’ is titled by the user of the iPad and is an Apple iPad Pro
10.5 (A1652).
43. RHB backed up his ‘Hunter’s iPad’ to the Laptop using iTunes backup. Hunter’s iPad
was last backed up on February 6, 2019 and was also last backed up to iCloud on January
30, 2019. This is yet another connecting physical and digital connection event showing
possession and use by RHB.

19
44. All of the data from this iPad backup was recovered and also contributes to the fact
Robert Hunter Biden is the only owner and user of the MacBook Pro Laptop hard drive
and the recovered iPad I analyzed for the Washington Examiner and shown below.
45. The data shown contains numerous unique identifiers including the device IMEI which is
considered the equipment identifier, the device serial number, the ICCID serial number
and the fact this device owner is connected to the iCloud account using another RHB
email gmail.com.

46. This iPad and the RHB gmail.com account was also linked to numerous
accounts with passwords including the Apple ID/iTunes account.

20
47. Another Dr. Fone extraction titled ‘Henry’s IPhone 6s’ appears to be Hallie Biden’s
phone. The below text message thread located in the folder:
\roberthunter\Documents\Henry’s iPhone's iPhone
6s\2017-01-29\Messages\HTML\Messages.html indicates the iPhone named Henry
belongs to Hallie.

48. Numerous messages pulled from Hallie’s phone suggest Hunter Biden was extremely
bitter over her alleged relationship with a man named David Walsh.
49. Extracted from the captured and saved ‘Messages.HTML’ file located in the folder
roberthunter\Documents\dr.fone toolkit for iOS\Hallie phone 11-16-2017 at
12.00.48\Messages\HTML\ revealed the following discussion regarding David.

21
50. Additional conversations from the Messages.HTML file included the following.

51. Text messages from that extraction contains a lengthy text message thread between Hallie
Biden and David Walsh dated February and March 2016. Walsh’s phone number is:
3028980758. The file path to the conversation is
"D:\Users\roberthunter\Documents\dr.fone toolkit for iOS\Hallie's Phone 05-31-2017 at
20.29.22\Messages\HTML\Messages.html"

22
52. Five days after the messages from Hallie’s iPhone were extracted by RHB on June 4,
2017, Hunter Biden copied and pasted that same text message thread between Hallie and
David in a new iMessage adding Hallie Biden to the conversation. Her response indicates
she was shocked and very angry at Hunter for doing this by texting:

53. The file path to the entire conversion extracted from the Hallie iPhone using Dr. Fone
software is located at "D:\Users\roberthunter\Documents\dr.fone toolkit for iOS\Hallie
phone (iPhone 6s) 11-12-2017 at 17.35.12\Messages\HTML\Messages.html and a portion
of the conversation is shown below.

23
54. I located Dr. Fone extracted Hallie Biden Facebook Messages, many of which show her
discussions with Hunter Biden centered around David, saved into the
\roberthunter\Documents\dr.fone toolkit for iOS\Messenger DB\Hallie phone
05-06-2017 19.55.00\com.facebook.Messenger\ folder as the file Messages 4.numbers.

○ + 04-24-2017 07:05:53; Received; R4im sorry but you just can’t see what it bis that
bothers me so much. If you told me you were deepthroating davids little cock every day for the
past ten years I would be better than you telling me the series of nonsensical reasons--- I lie3d
because of your crazy reaction to me being with david...why s this bullshit; because I’ve never
been jealous of devid - he used to walk into jy bathroom and have full discussion with katheeen
while she took a shower with a glass door...could care less;;;;I only became crazy over the
relationship when you lied to me for no reason at all...snd then you lied again and again. And
again and you continue to do so nd iy makes me so sad and lonely in my attempt to make us into
something more than two people sharing sa bed. If hats all you want than I I will; have an open
relationship-- it will be devastating at first but thats all my ego i can recover from that . And to tell

24
 you the truth it will give you the chance to find the stability you need. I have a horrible. Influence
on your life. I know you love me but I also know you need space to heal. We can at least agree on
that. Lets give this a chance to settle and for you to heal andformeto regain somesanity. We will
always love each other and w can do it without the torture of whatever this is. Your always knew
this day would come- your caution and instict we’re right. I love you so much that I’m actually
willing to let you go

○ + 04-26-2017 08:25:51; Received; Hallie Arte you ready for me to tell everyone
that in fact Ashley was right about you that every word she wrote was actually; y truth. I hope you
are b/c you’re not going g to fucking spread lies and truths about me anymore the ones that
everyone uses against and that give you the permanent way out. What more could I have done to
love another person and I alwasysd will but my god at least realize for your own sake for the kids
sake that Unka was never going to be with us for long and there will be a new unit one day just not
the crazy brother of your daddy’s. I choose you over my children you choose david Walsh over
me. Do you realize how insane that makes me feel for feeling the way I feel about you how much I
now know that I will never believe my heart assassin I will never fucking love anyone again.
Because of you because you choose david over me and still do this very moment I found out that
there is limit too my girls love for me.

○ + 04-28-2017 11:57:19; Received; You are heartless and I will not be treated like
second fiddle to not only beau but now fucking David I won't play Johnny drama for the two of
you anymore. You are really just a selfish mean spirited girl.

○ + + 04-28-2017 04:46:11; Received; I'm sorry Hallie but the truth is

that I simply don't believe you. I think your affair with David started innocently enough- it was
nothing it was familiar it was friendship and fun and you could rationalize it all by saying I am
free to be whoever I choose however I wish and my pain and suffering grant me A license to make
adult decisions about adult affairs. And David was discreet and available and had as much to
loose and had a reason to be at the house and out with you and etc... The perfect Todd for a grown
up. The problem was you and me? But at that time you didn't owe me anything you didn't think
that we were a real possibility or that I would even commit the way I said I would commit. So
where is the harm neither one of us had any inkling about the others neither one of us could have
ever imagined that.

○ + + 04-28-2017 04:49:45; Received; And the truth is sex is irrelevant

David is irrelevant the only thing I cannot abide by is the lie and then the lie about the lie and on
and on. That is the only thing I truly care about

Secret Photos
55. RHB also kept photos hidden on the MacBook Pro Laptop hard drive in Hidden
Albums. In order to hide photos or videos a user must:
a. Open Photos.
b. Select the photo or video that you want to hide.
c. Control-click the photo, then choose Hide Photo.Confirm that you want to hide
the photo or video.

25
 d. If you use iCloud Photos, the photos that you hide on one device are hidden on
your other devices too.
56. Contained within the hidden vault were numerous files including a Ha Biden location
screenshot, handwritten login accounts with usernames and passwords (redacted),
personal photos including selfies, RHB contact information, AT&T Phone statement for
Hallie Biden and photographs of credit cards. The files path confirms the hidden data was
stored both in the Vaults/MySecretPhotos/Videos and as part of the RHB iCloud backup.

Email Verification
57. I was asked by the Washington Examiner to verify an email with the subject
‘Expectations’.
58. I identified the email as being sent on May 13, 2017 from James Gilliar
j2cr.com to recipients shown below.

26
59. I analyzed the email header and confirmed this email is a valid email which was sent to
multiple individuals on multiple domains including the RHB iCloud account of
icloud.com, a nazent.com domain and a CC to the sender domain of j2cr.com.

60. Once the email was delivered to the recipients, further confirmation the original
‘Expectations’ email is valid is the threaded conversations and replies which occurred
from the recipients. Note: Time Zones for the email custodians may be different and the
UTC timezone was used to sort the order of the following threads. Using websites such as
www.worldtimebuddy.com will allow a person to convert UTC times to local times.

27
28
29
30
Foreign Agents Registration Act (FARA)
61. As requested by the Washington Examiner I located any communications related to
FARA.
62. One April 13, 2014 RHB used his iCloud email account icloud.com and emailed
Devon Archer advising him the “need to abide by FARA and any other US laws”. The
email is shown below and the header data was verified and this email is authentic.

31
63. Another verified and distributed email thread pictured below discusses the registration
under the lobbying disclosure act or foreign agents registration act.

32
64. The threaded conversations between multiple parties in May 2014 also included email
messages to rosemontseneca.com and one email dated March 29, 2016 from
Eric Schweirn to Hunter Biden discussing FARA.

Expert Conclusion

Based on my analysis and overwhelming data confirmed the Hunter Biden

MacBook Pro was not hacked and the data contained on the hard drive is authentic.
Based on the data I examined there was no manipulation of any photographs, emails,
documents or other user activities.
Also, I confirmed with 100% certainty Hallie Biden’s iPhones were accessed and
data from the devices was copied to Laptop and stored in numerous folders and later
accessed.
If I was able to obtain specific information from Cloud, Financial Providers,
Cellular Carriers and other companies identified during my analysis, I would be able to
prepare an affidavit for any requesting party or agency including any related testimony.

FURTHER AFFIANT SAYETH NAUGHT.

Signed this the 24 day of May, 2022.

____________________
Konstantinos “Gus” Dimitrelos
CEO - Cyber Forensics, Inc
Retired - US Secret Service

33