Final Hunter Biden Laptop Report Redacted

1.
My name is Konstantinos “Gus” Dimitrelos, I am over eighteen years of age and have
personal knowledge of all facts and circumstances set forth herein.
2. I have reviewed a hard drive provided to me by Washington Examiner Investigative
Reporter Andrew Kerr.
3. I am a retired US Secret Service agent and began cyber forensics in 1996 getting certified
by the Royal Canadian Mounted Police and US Treasury CIS2000 program.
4. In addition to 11 other Secret Service agents, I was the first in the United States to
become certified as a computer forensics specialist and have been conducting forensics
examinations while employed or contracted by various government agencies and in the
private sector continuously for 26 years.
5. While in the US Secret Service (USSS) I performed numerous cyber investigations and
was a USSS lead investigator for the Canadian/USA Northeast Blackout of 2003 and
Technical Security Coordinator for the 2002 Salt Lake City Winter Olympics.
6. I am certified in International, US Federal and US State Courts as a Digital Evidence
Forensic Expert.
7. I have been contracted since 2007 by the US Department of Justice-US Attorney’s Office
(DOJ-USAO) to conduct cyber investigations and cyber and cellular forensics and
collect, examine, investigate and testify in cyber and cellular cases for all federal
agencies and more than 40 state and local police departments.
8. I have conducted more than 3,000 forensics exams, trained over 2,000 law enforcement
personnel and have testified more than 100 times in state, federal, international courts and
depositions.
9. I am certified in US Federal and US State Courts as an Expert in Cellular Historical Data
Reconstruction (Cellular Triangulation) which is the analysis of Call Detail Records.
10. I have performed thousands of Call Detail Records Examinations from all major
providers including TMobile, Verizon, AT&T, Sprint and others.
11. I am certified in US Federal and US State Courts as an Expert Geo-location evidence
from photographs, GPS units, vehicles, social media and other location based
technologies.
12. I conduct network-based forensics and data breach investigations in various environments
Cyber Forensics, Inc - CyberForensics.com - EIN 82-2561188 - DUNS 080902944 - CAGE 7Z4P4 1
including Linux, PC and macOS environments.
13. I am a Certified Ethical Hacker and perform penetration testing and vulnerability
assessments.
14. I am an instructor for the Regional Counterdrug Training Academy and authored the
Cellular Triangulation and Mobile Device Forensics course for Law Enforcement which
focuses on Call Detail Records analysis for all major providers and mobile device
forensics on Android and iOS devices.
15. I am a US Department of State contracted lead instructor, course developer and cyber
program coordinator for the Global Cyber Anti-Terrorism Assistance program (GATA).
16. I perform cyber forensics, mobile device forensics and/or cellular triangulation services
for corporations including Toyota Tsusho of America, DHL, State Farm and Allstate.
17. I have attached my current Curriculum Vitae to this Affidavit report.
Cyber Forensics Request Background

18. On April 5, 2022 I received an unsolicited request for forensics services from Washington
Examiner Investigative Reporter Andrew Kerr.
Cyber Forensic Analysis and Findings
19. The following report is based on forensics analysis of a hard drive purportedly belonging
to Robert Hunter Biden.
20. Washington Examiner Investigative Reporter Andrew Kerr’s requests were to identify if
any data was manipulated, if the current hard contents was forensically sound and
verifiable and to determine who the hard drive and its contents belonged to.
21. The Washington Examiner contracted my services on May 5, 2022 and my analysis
continues to date.
Apple MacBook Pro Laptop Hard Drive

22. Upon receipt of a hard drive from Investigative Reporter Andrew Kerr, I documented my
procedures and imaged the hard drive (Cloned) and conducted my analysis on the
forensic image. After imaging was verified the hard drive was returned to Andrew Kerr.
23. Since I did not personally remove the hard drive from a computer nor did I possess the
original parent computer, my analysis was to also determine the hard drive origin.
24. As requested by the Washington Examiner, I was asked to determine the ownership of the
provided hard drive but was not asked to perform any additional investigation into any
specific activity.
25. If requested, I can provide additional analysis and reporting to any government or
non-government organization(s).
26. My initial finding was that the Apple MacBook Pro was named ‘Robert’s MacBook Pro’.
The naming of a computer is done so by the user and administrator of a computer.
27. The device identifier of the hard drive is F018980E7C2C and the device serial number is
FVFXC2MMHV29.
28. The serial number enables an examiner to verify what make and model laptop the hard
drive was originally installed in.
29. I did confirm the hard drive came from a 13” mid-2017 MacBook Pro.
30. The hard drive contained approximately 5,791,819 files and system artifacts and was
connected to and authenticated on an Apple iCloud account of icloud.com which
is owned by Robert Hunter Biden (RHB).
31. This report is only a snapshot report and does not reflect the complete analysis which
would include thousands of unique identifiers, files and activity associated with RHB.
32. Unless already reported on or public this report will contain redactions to protect PII.
33. RHB used several emails for business and personal use including:
○ GMAIL.COM
○ ( ME.COM)
○ RSPDC.COM
○ ROSEMONTSENECA.COM
○ SENECAGA.COM
34. Apple devices and the iCloud platform allows a computer or mobile device user to
backup to the iCloud storage platform, access their stored data and download their data
from iCloud.
35. The sole MacBook Pro hard drive administrative account and user ‘roberthunter’
downloaded and accessed the icloud.com iCloud account numerous times and
stored the backups in the user\roberthunter\Downloads\ folder.
36. The data on the hard drive provided by Andrew Kerr originated or was created from 2008
through 2019 and is consistent with all other Apple MacBook Pro hard drives I have
examined in the past 20+ years.
37. Since this Apple MacBook Pro model was not released until 2017, all data prior to 2017
was stored (backed-up) to the icloud.com account and then downloaded to the
MacBook Pro hard drive Downloads folder as illustrated in paragraph 30.
38. The hard drive contained thousands of documents and downloaded iCloud files including
signed contracts, photographs, financial records and other user ‘roberthunter’ data. One
such signed document is shown below including the file name, file path and date of
creation.
.
39. The importance of this document, and many others like this one, is the number of
elements involved with it including a human creating the company, filing the corporate
documents, paying the setup fees, sharing the document with at least 6 other people all of
whom signed the document. Once executed by all parties, the user ‘roberthunter’
manually saved it to his Desktop. (note: The Hunter Biden signatures in this contract are
electronic signatures not original ‘wet’ signatures)
Path Modified Accessed Created
/root/Users/roberthunter/Desktop/DESKTOP 12/9/2017 4:50:46 PM 10/28/2020 12:47:02 AM 12/9/2017 4:50:46 PM

DOCUMENTS/BH 27.11.2017 copycopy copy 2.pdf (2017-12-09 23:50:46 UTC) (2020-10-28 06:47:02 UTC) (2017-12-09 23:50:46 UTC)
40. The file in paragraph 39 titled ‘BH 27.11.2017 copycopy copy 2.pdf’ was last accessed
on 2020-10-28 06:47:02 UTC time.
41. I identified numerous documents and emails accessed after the hard drive was in the
possession of others and after surrendered by John Paul Mac Isaac.
42. In addition, a folder on the Desktop titled ‘Hunter Burisma Emails’ was created on
September 1, 2020 and files were copied into the folder by an unknown person.
43. A total of 123 emails were copied into the folder and the entire list of files is attached to
this report as Appendix 1.
44. These emails are duplicates of email located within the RHB Apple Mail application
which have been authenticated as being valid emails and forensically sound.
45. Unlike the previous signed contract located as a stored file on the ‘roberthunter’ desktop,
the below signed contract is stored internally in the Gmail.mbox as an email attachment
located under 12 nested folders. Unlike the default macOS user folders such as Desktop,
Document and Downloads, this nested Scan 1.jpeg file is stored by the Mail application
in a nested folder not accessed by the computer user ‘roberthunter’.
Path Created
/root/Users/roberthunter/Library/Mail/V6/1670BB73-9EB5-4000-83C4-3CB2E76EB29F/[Gmail].mbox/All 2/9/2019 11:19:05 PM (2019-02-10

Mail.mbox/E9273EF6-B8ED-4DF2-A955-34538DD822C2/Data/7/1/1/Attachments/117720/2.2/Scan 1.jpeg 06:19:05 UTC)
46. In addition to the two previous signed contracts located in different folders, the below
contract also links the ‘roberthunter’ computer user Robert Hunter Biden not only by the
signature and dissemination but also in a SMS chat with his personal assistant Katie
Dodge gmail.com on April 12, 2018 7:09:38 AM.
47. Upon initial setup of a MacBook Pro a user defines their Apple Recovery account which
on this hard drive was configured as and administered by Robert Hunter.
48. There were hundreds of unique identifiers showing RHB is the only user of the Laptop.
There were also thousands of iPhone photographs and videos taken by RHB including
personal ones, RHB identification cards, travel documents, credit cards, business and
financial transactions. The following pages reflect physical items photographed and
stored on RHB’s iCloud and/or the MacBook Pro hard drive. If available, the item shown
may also contain geo-location data which identifies the GPS coordinates of where the
photographs were taken. The complete photograph EXIF data, which can be provided,
also includes the device which took the photograph and when they were created
(digitized).
49. The purpose of my forensics analysis was to determine if a human in control of the
MacBook Pro is the person responsible for the data contained on the hard drive. Placing
a person at the keyboard would require proving with 100% certainty the person was the
only owner and another person is not the creator, author, modifier, recipient or sender of
the files and activity recovered on the hard drive.
50. In addition to unique identifiers with Geo-location embedded data, there were additional
RHB identifiers taken by other iPhones and shown in the following pages.
Make - Apple
Model - iPhone 7
Software - 10.3.2
DateTimeDigitized
2017:07:10 05:03:46
Make - Apple
Model - iPhone 6
Software - 8.4
DateTimeDigitized
2015:11:30 15:30:21
51. There are approximately 4,693 photographs taken from August 2008 through March 2019
using various devices including iPhones 5,6,7,8,X and other camera or mobile device
models. The redacted photographs shown below reflect ones taken with an iPhone and
stored in various folders on the MacBook Pro hard drive.
Make - Apple
Model - iPhone 7
Software - 10.3.2
DateTimeDigitized-2017:07:15 15:09:19
Make - Apple Model - iPhone 6
Software - 9.3.2
DateTimeDigitized - 2016:07:20 11:24:37
Make - Apple Model - iPhone 6

Software - 9.3.2
DateTimeDigitized - 2016:07:20 11:24:37
Filename - image1[721944].jpeg
DateTimeOriginal2017:12:20 14:32:09
UserComment - Screenshot
Filename - IMG_0043.JPG
Lens Make - Apple
Lens Model - iPhone 6s back camera
RHB’s Apple iCloud Account
52. RHB paid for his iCloud platform on a monthly basis. Numerous iCloud receipts were
located, one receipt shown below is from 2017.
53. There are numerous

ways to access an iCloud user account including iCloud.com login, third party
applications or from authenticated devices such as a MacBook Pro, iPhone and iPad.
54. RHB currently has three (3) devices verified with his iCloud account allowing him to
access, open, author, revise, upload, send, store and download data from the account.
Device Name Device Added Date Device Serial Number Device Last Heartbeat IP
Robert’s iPad 01-16-2019 4:48:33 DLXQL4EUGMLD 73.61.117.110
iPhone 01-14-2019 3:31:58 G0NXF19JKPFY 107.77.223.136
Robert’s MacBook Pro 10-22-2018 23:45:43 FVFXC2MMHV29 73.61.117.110
55. It should be noted that ‘Robert’s MacBook Pro’ laptop listed above was authenticated and
connected with the icloud.com account 1 day after the user account ‘roberthunter’
was created on the MacBook Pro on October 21, 2018.
56. RHB sent and received thousands of emails using the macOS Apple mail application, his
icloud.com account and other personal and business email accounts.
57. An Apple ID is the account you use to sign in to all Apple services. Since 2011, RHB’s
Apple ID has been consistently and has been authenticated using his below
devices and associated connection dates in ascending order.
Apple ID Number Device Identifier Device Named by Owner/User Device Serial Number Associated Date
0487e5e533ff336c1e8ff8dc8da8a42319f71659 RHBs iPhone 5K03725VA4T 2011-11-06T04:38:08Z
251a4dceb39bdb2b219a4002a7cae0e4ab591f24 iPad DN6GPY1ZDFJ3 2012-01-23T21:11:31Z
0b192526ab7f28e2c94afda69ceda110597fec92 RHBs iPhone QR21031MA4T 2012-04-02T22:17:30Z
1378449e0c7cab40300d5cc1b093efaeb083d7ba iPad DKVHH197DFJ3 2012-04-28T01:07:24Z
05c943f603a064de956737b814082515839d553f RHB's iPhone F17JF7R8F38W 2012-10-03T22:25:42Z
c7d80b03f9cd759133deb1ae5a815067ce0b108e Robert's iPad F4KK251QF195 2013-02-19T19:27:06Z
74dab6ccfe8f6d06a7185324eed9630f8cb91c38 iPhone DQGK20AHF38W 2013-03-19T16:35:23Z
1040F38BF67A Mac C02210201H1DY4WAK 2014-06-16T16:06:29Z
44813bb5ea8e84f23075018a22b62a2ddf2c8268 RHBs iPhone DNPNF7B8G5MK 2014-09-26T20:26:38Z
3294a119cb42ede7d640789e8e689a22d1bcd9de iPad F4LN71E2G5V4 2015-02-02T18:44:38Z
5d360c8344de193a85fbf5d0e1b4e76866108ce0 iPhone F78NVR47G5MK 2015-03-06T19:27:12Z
375ae95961706c69aa636ac283a112321182e401 Roberts iPad DLXQL4EUGMLD 2015-11-11T20:06:53Z
c37631799309010b8f5967a9ef419499b9a9931a Robert's iPhone C7JNW76QG5MG 2016-09-06T01:30:36Z
147ebb6cbdf62a2ac9fd4adc4969da1eb05b25dd iPad Pro 206 DMPR876AH1MD 2016-09-11T21:54:52Z
03dd15937a2d4ef20a486a6a38365efc86a4d74a iPhone DQGKK080FH1G 2016-09-18T09:31:01Z
eab4455a0c78f4035088f9c3456db6a41e9a2bc9 HHB4 F17RX8XEHFLM 2016-09-22T00:00:19Z
74c22abd15086602b28a4bcde4dc2c2c16e1a64c rhb7 C76SFH8MHG7Q 2016-10-09T15:55:54Z
aec544c1f8103404a0cdcef24dae75d9e6810145 Henrys iPhone DX3SMDXKFF9R 2016-11-22T00:19:54Z
995372fbb6a44f1fb94647f36fabcdcc285868e0 iPhone17 F71SXG61HG71 2017-01-24T03:14:00Z
C4B301A1D720 Mac C026342008JGTQMAH 2017-02-02T15:30:31Z
784F438F7989 Mac C02708606RBHCH81Q 2017-04-19T09:15:28Z
51c968b35c496aa74b060cad95b3aa62d5d34249 iPhone F71SN6HTHG7D 2017-05-27T07:19:55Z
0D14A9D130C1031AE7C50064DE7B4D7C6370BEA6 Apple TV C07TCUVJG9RM 2017-08-17T04:40:24Z
950992368b3cf7d89e73fd47525e3f61d5309716 Roberts iPad GCTV1234HLJK 2017-08-24T07:37:41Z
945d55fec6a12427421ce87aabcdfbd50915ea54 Roberts iPhone C6KTX7UDHG7F 2017-08-24T23:58:59Z
1408ED3DB02D88B38B126618BF61B64EF71D401E Apple TV DY3SYVEXG9RM 2017-09-02T08:40:50Z
5cab7a41cde5cd78852c421c7c20aa8aa2ed137f iPhone17 F17V48ZEHX96 2017-09-15T19:34:50Z
459575edef9a9133df4d32f3a8f303909591b515 iPhone F17JLC5QF8H5 2017-09-19T15:49:55Z
1cacea75db2f0b5b536bc009de708a94a8e61ea0 iPhone DX3TPQJ9HTVK 2017-09-19T17:00:13Z
e9b8b678772ce7231eef1b0e65b0cb7803ce7026 iPhone C8PV80V4JC6L 2017-10-11T22:58:01Z
ef250c098dd8acba05043e28bda322f3458f4119 iPhone F17TG76MHX97 2017-10-20T18:57:51Z
d16834d9ff972e72e61e5c6a273e03f7bd169ccc iPhone F2LVGYBDJCLQ 2017-10-20T22:57:07Z
e5b482862d55bb2ecacc4f274cb1c296687d0948 Roberts iPad GCGVC60MHLJJ 2017-10-21T08:17:50Z
9cd536d8d78f3185b225c58b81608ad91d8d8a20 iPhone C7CVK1YBJC6C 2017-11-17T22:37:49Z
4c341212b6044b8928f95ad75ea7dfb19793fb8e Robert Hunters iPhone F2MVHVNGJCLY 2017-11-19T10:31:34Z
8C859026117A Bobbys MacBook Pro C02730301ELHRQT1Q 2018-01-08T09:13:06Z
646183d6850d909bc12f57c3c8c69cbc4edb1de1 iPhone F18VT93MJCL8 2018-01-21T00:59:47Z
fe68b801301a9696b19c0debb806930015563dd7 iPhone F18VT7UFJCL8 2018-01-21T01:12:09Z
47be0a706190ea262634e63c6ac986eb0f2ce918 Roberts iPad DMPV94KNHLJJ 2018-01-21T01:29:35Z
8C859026117A Bobbys MacBook Pro C02730301ELHRQT1Q 2018-01-22T18:11:11Z
88E9FE51EAE4 Roberts MacBook C028164016YHJ9V1Y 2018-05-29T06:49:41Z
88E9FE51EAE4 Roberts MacBook C028164016YHJ9V1Y 2018-08-03T06:46:44Z
F018981BAD27 Bobby's MacBook Pro C02830506M3JH4T17 2018-09-01T17:35:54Z
F018981BAD27 Bobby's MacBook Pro C02830506M3JH4T17 2018-09-02T11:26:37Z
d6500a6040c532d1df4722e2d6fe3df32f5b42f2 Robert Hunters iPhone F2LX5D3XJWLM 2018-09-20T06:39:29Z
524BE6C0AE4A714FF296E3E305A4F9168AFCC5BC Apple TV C07VNJ0SJG2X 2018-10-04T05:41:24Z
cf545b458408223feb99184b402d127eb001e382 HB rediPhone FD4X75MNJCLY 2018-10-14T01:30:26Z
c0dc2f0847805f2112645809ac1dc7a8fcfcfa53 iPhone G6TX2F20JCL8 2018-10-14T18:28:55Z
F018980E7C2C Roberts MacBook Pro FVFXC2MMHV29 2018-11-15T10:43:18Z
Financial Transactions and Business Involvement Verifications

58. RHB received or sent hundreds of documents or transactions which confirmed he was in
control of the Laptop during the transactions. None of the emails examined were
fraudulent or altered and all are authentic and drafted, sent, and received by RHB. One
example is an email on the hard drive showing Wells Fargo emailed RHB at
rspdc.com warning him that his credit card was charged $717.04 by the Sixty
Beverly Hills Hotel in Beverly Hills, California. I verified the email header and the email
also contains a unique identifier confirming it is authentic and sent from Wells Fargo.
This email correlates with RHB’s June 22, 2018 reservation at the Sixty Beverly Hills
Hotel. Times reflected will have time zone differences as with all emails sent or received
from different time zones.
Email Header Summary:

Message Id: Date: 6/18/2018 7:20:01 PM
Delay: 0 seconds
Delivered-To: rspdc.com
X-Google-Smtp-Source:
<1014467224.401955.1529371200338@mn2-sequoia-ilb-al.wellsfargo.com>
Received
Hop: 1
From: mn2-sequoia-ilb-al.wellsfargo.com (mn2-mkze911-lb.wellsfargo.com
[162.101.141.120])
By: mxdalpx07.wellsfargo.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2)
With: ESMTP
Id: w5J1K0TQ000333
For: rspdc.com>
Date: 6/18/2018 7:20:00 PM
Hop: 2
From: mxdalpx07.wellsfargo.com (mxdalpx07.wellsfargo.com.
[159.45.87.83])
By: mx.google.com
With: ESMTPS
Id: y13-v6si13145023pgq.69.2018.06.18.18.20.01
For: rspdc.com> (version=TLS1_2
cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128)
Date: 6/18/2018 7:20:01 PM
Delay: 1 second
Percent: 100
Hop: 3
By: 2002:a81:d82:0:0:0:0:0 With: SMTP Id: 124-v6csp102541ywn
ADUXVKJFz3f/N04WqWqt0hagn8WYCzLKSjLqBvRVyt6jrfL6zSebw/KQfD/LsLp3RWHjYZBLXOAM
X-Received: by 2002:a63:7b1e:: with SMTP id w30-v6mr12356024pgc.402.1529371201438; Mon, 18 Jun 2018 18:20:01 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1529371201; cv=none; d=google.com; s=arc-20160816;
b=mNjwRNc1x4g96J9GUTzHC2kkIIoGeDXhyiUODGJH4vNljtERi0Nbwr3Z6GWYt4jWmS
yZWcPAJeDiZ+oI5glvmGosgYNDirwrGjiA6UXtyVwFSVl8zuXsxp1Y5F5zHqlb2d4EIR
9+V75PxN5yYzPtQLbdRu1/t2UZmECJ9VOqBxASRFFfzngEkasls0BXd4TrmnPzP+wp/K
xd4K3OrJ9KQnkBU2gjFD4abGhzkAA37f0jbC0blsbhmrhTcA9guT4xA5AMm4ubuHDLug
07mCpOqdUL5oZvbtzO2KPRzgUBPj/A2y2PqCIX9yJ9DrIoYe1O+LoUkr3NvVfqZUccRU +PrA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=uow_id:mime-version:subject:message-id:to:from:date:dkim-signature :arc-authentication-results;
bh=aBlOIrrjC9vjnIYDwLDN4OzXQH+U/61X5dhCJP+ba4E=; b=VHOO14td+XHH4o4IsYEFU3ALCHiMtCK4pZbLX66Dh+ILQQyIEDHjv40CpZQTP0QPHU
639v/ftZmfZ9wJ1cB/S/1EYDUuPHlsDceXCXxBhg1Dw9FtBN9l/6P6HslxU70sQO8q0/
5p96keY2Wt8Ugey+Rhpbjm/ltBb0HAzAQpoyd6FAgXYaTTe1eeOc0LTaxjg91dCjfUgP
xh6+a626+Vkh6IAzMrb0JxI4Ep+LTA1itkygbxdA1cBEZu+UahktZUzlFeM0sAaWAk/N
voi+USRtxIvM/ZgT0IGx0YdvcKEwK47BcY0N6F0+Bz03MvqVmoAMdsjRzWjbBSjsZxf+ RruQ==
ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@notify.wellsfargo.com header.s=2011-05-wfb header.b=XzsByvDC; spf=pass
(google.com: domain of alerts@notify.wellsfargo.com designates 159.45.87.83 as permitted sender) smtp.mailfrom=alerts@notify.wellsfargo.com; dmarc=pass
(p=REJECT sp=REJECT dis=NONE) header.from=notify.wellsfargo.com
Return-Path: <alerts@notify.wellsfargo.com>
Received-SPF: pass (google.com: domain of alerts@notify.wellsfargo.com designates 159.45.87.83 as permitted sender) client-ip=159.45.87.83;
Authentication-Results: mx.google.com; dkim=pass header.i=@notify.wellsfargo.com header.s=2011-05-wfb header.b=XzsByvDC; spf=pass (google.com: domain
of alerts@notify.wellsfargo.com designates 159.45.87.83 as permitted sender) smtp.mailfrom=alerts@notify.wellsfargo.com; dmarc=pass (p=REJECT sp=REJECT
dis=NONE) header.from=notify.wellsfargo.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=notify.wellsfargo.com; s=2011-05-wfb; t=1529371200;
bh=eQfLCX5eVbAGhyRQICLEOzmvg4OD5seqbu/7wY93uGA=; h=Date:From:To:Subject;
b=XzsByvDC3OdJebvH2Xu1cgu+VECM3WAhcze87DfE8DvbkpTroq9Qya1vogruwDMKh
1KZu2QYCkM5sMt/lo6JSPd9VB94AATu1+DGqycnnW3hFXlJlVTct2C/VhWQewZKOet d+YjieU9b1YgG+i2gLUoCzCKyoQlJpu/F6Vf9nPo=
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_401952_1536109271.1529371200337"
UOW_ID: 5de358c5-34bf-41e8-be4b-9c476823e974||15130081274
X-Priority: 1
59. On June 22, 2018, while at the Sixty Beverly Hill Hotel, RHB used his personal iPhone X
to photograph himself and an unknown woman more than 24 times while in his hotel
room. The photographs taken by RHB utilizing his iPhone X were then downloaded to
his MacBook Pro and stored in his Robert Hunter iCloud photos downloads folder on the
hard drive. (Explicit photographs have been redacted to protect the woman)
60. RHB also confirmed his history with Wells Fargo in a chat conversation.
RHB’s Apple iPhone X

61. During my analysis I discovered RHB owns an Apple iPhone with the serial number
G0NXF19JKPFY which was in use on and before March 2019. The iPhone cellular IP
Address of 107.77.223.136 is consistent with his cellular provider AT&T account.
62. Hunter’s iPhone X was in use and syncing with the icloud.com iCloud account in
March 2019 and prior and received numerous security verification codes from Apple
which are used to verify access into the Apple iCloud platform.
63. There were also hundreds of other documents identifying RHB which were emailed,
created, downloaded and stored on the MacBook Pro hard drive. These records also
included RHB personal records, signatures, threaded communications via SMS, social
media and email shown in the following pages.
64. One chat conversation with his assistant Katie Dodge on July 24, 2018 discusses the
transfer of Burima funds to Devon.
65. In another chat conversation with a person named Azur H. RBH

states he was picking up his Chinese partner from LAX on July 23, 2018.
66. I verified RHB was in fact in LAX during July 23-24, 2018 and staying at the Kimpton
LA Peer Hotel where he took a selfie and also had a conversation with an unknown
person regarding them coming to the hotel.
67. The RHB selfie below along with most photographs located on the drive were located in
iCloud Download folders, Documents Folder, the Desktop or as email attachments.
68. I also confirmed reservations at the Kimpton Hotel purchased on July 19, 2018.
69. On December 14, 2018 RHB had a chat conversation with Hallie discussing the
possibility his Chinese business partner was assassinated.
70. Based on reports from other news outlets such as the New York Post, I verified and
located numerous documents related to businesses RHB was associated with. One
particular business named Hudson West III was reported as a business RHB owned with
other family members.
71. I also confirmed the New York Post photo dated Aug. 1, 2017, which was a handwritten
flowchart of Hudson West III ownership and split between two entities ultimately
controlled by Hunter Biden and the “Chairman” which I confirmed through news stories
and forensics to be the home of Gongwen Dong. The flowchart was photographed in
2017 at a residence in New York and stored on the MacBook Pro hard drive.
72. I also located numerous emails, documents and invoices related to Hudson West III as
well as the desolation of Hudson West III as indicated in the New York Post October 15,
2020 report by By Emma-Jo Morris and Gabrielle Fonrouge. As per Delaware State
records, the company was opened April 19, 2016 and closed November 2, 2018.
73. Hudson West III signed, submitted and filed records are located on the RHB MacBook
Laptop hard drive and a sample list of records and the shortened file paths located on the
hard drive are shown below.
Name Path
HUDSON WEST III LLC - DE - Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox/...Messages/73360.partial.emlx/HUDSON WEST III LLC - DE

Cancellation.pdf - Cancellation.pdf
Hudson West letter.pdf Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox/...Messages/54254.partial.emlx/Hudson West letter.pdf
Hudson West letter.pdf Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox/...Messages/54351.partial.emlx/Hudson West letter.pdf
Hudson West 01152018.pdf Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox.../Messages/66069.partial.emlx/Hudson West 01152018.pdf
Hudson West 01152018.pdf Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox.../Messages/66220.partial.emlx/Hudson West 01152018.pdf
HW Invoice.pdf Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox/...Messages/118267.partial.emlx/HW Invoice.pdf
HW Invoice.pdf Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox/...Messages/118355.partial.emlx/HW Invoice.pdf
HW3 Group Name vF.docx Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox/...Messages/98733.partial.emlx/HW3 Group Name vF.docx
HUDSON WEST III LLC - DE - Users/roberthunter/Library/Mail/...INBOX.mbox/...Messages/10422.partial.emlx/HUDSON WEST III LLC - DE -

Cancellation.pdf Cancellation.pdf
Hudson West III LLC - 2nd A&R LLC Users/roberthunter/Library/Mail/...INBOX.mbox/...Messages/10537.partial.emlx/Hudson West III LLC - 2nd A&R LLC
Agreement (redlined).pdf Agreement (redlined).pdf
Agreement Executed.pdf Agreement Executed.pdf
HW III paid to CEFC Details.pdf Users/roberthunter/Library/Mail/...INBOX.mbox/...Messages/10788.partial.emlx/HW III paid to CEFC Details.pdf
HW III paid to CEFC (All Users/roberthunter/Library/Mail/...INBOX.mbox/...Messages/11166.partial.emlx/HW III paid to CEFC (All payments).xlsx
payments).xlsx
HW3 Group Name vF.docx Users/roberthunter/Library/Mail/...INBOX.mbox/...Messages/2777.partial.emlx/HW3 Group Name vF.docx
Hudson West 01152018.pdf Users/roberthunter/Library/Mail/...INBOX.mbox/.../Messages/3514.partial.emlx/Hudson West 01152018.pdf
Hudson West 01152018.pdf Users/roberthunter/Library/Mail/...INBOX.mbox/.../Messages/3591.partial.emlx/Hudson West 01152018.pdf
Hudson West III Legal Fee Users/roberthunter/Library/Mail/...INBOX.mbox.../Messages/4129.partial.emlx/Hudson West III Legal Fee $14351.88.pdf
$14351.88.pdf
Hudson West III LLC Agreement Users/roberthunter/Library/Mail/...INBOX.mbox.../Messages/4291.partial.emlx/Hudson West III LLC Agreement Executed.docx
Executed.docx
Hudson West III LLC Agreement Users/roberthunter/Library/Mail/...INBOX.mbox.../Messages/4453.partial.emlx/Hudson West III LLC Agreement
v4.docx v4.docx
Hudson West III Org Chart.jpg Users/roberthunter/Library/Mail/...INBOX.mbox.../Messages/6233.partial.emlx/Hudson West III Org Chart.jpg
v4.docx v4.docx
v4.docx v4.docx
Executed.pdf Executed.pdf
Hudson West III LLC v 4.docx Users/roberthunter/Library/Mail/...INBOX.mbox.../Messages/6821.partial.emlx/Hudson West III LLC v 4.docx
HW Invoice.pdf Users/roberthunter/Library/Mail/...INBOX.mbox/...Messages/8571.partial.emlx/HW Invoice.pdf
Hudson West III LLC Agreement Users/roberthunter/Library/Mail/...Sent Messages.mbox/...Messages/11660.partial.emlx/Hudson West III LLC
v4.docx Agreement v4.docx
v4.docx Agreement v4.docx
Executed.pdf Agreement Executed.pdf
Hudson West III Legal Fee Users/roberthunter/Library/Mail/...Sent Messages.mbox/...1/Messages/12013.partial.emlx/Hudson West III Legal
$14351.88.pdf Fee $14351.88.pdf
Hudson West letter.pdf Users/roberthunter/Library/Mail/...Sent Messages.mbox/...1/Messages/12049.partial.emlx/Hudson West letter.pdf
74. One verified email from RHB’s iCloud.com account with the subject line ‘Letter
to C’ outlines the sale of natural gas LNG. The email verbiage matched that of manually
typed and stored Apple Notes RHB stored on the MacBook Pro Laptop hard drive.
75. The November 8, 2017 email was drafted on the same date and stored in the
roberthunter\downloads folder as ‘DearPartner,-2017-11-08T20:47:39Z.txt’
DearPartner,
I hope you and your family are well. I look forward to seeing you at your home in New York next
week. I have much to report regarding our partnership here in the US. My uncle and myself are
grateful for your wisdom of including Kevin and Mervyn in this endeavor. We all have been
working hard to make our new company a great success.
To that end hope that you have received the information I sent regarding the LNG opportunity ties
in the state of Louisiana. We began to investigate the opportunities in. United States well before
the public announcement by the Chinese government of its interest in Natural Gas imports from
around the world.
I specifically want to speak about a framework by which our partnership can operate in the
natural gas business. This framework would fill the short term needs of CEFC by providing off
take contracts for large quantities of LNG at very competitive rates while also advancing the long
term goals of CEFC through a partnership or acquisition of a promising LNG terminal project in
Louisiana. The proposal I have shared with you has the added benefit of being good for both the
United States and China simultaneously.
I was hoping that we would see one another today in Shanghai, but I fully understand the fluidity
of our schedules. Nevertheless, time is of the essence. Therefore, I suggest with all due respect
that you send your team of LNG and infrastructure experts ahead of you to New York/ Huston or
the proposed partner in this deal could send his team to Shanghai in the immediate. They could
begin the due dilegence process and possibly have a completed report before you arrive. Then we
could use at least part of our meeting in New York next week making decisions and executing
rather than explaining and debating the proposal.
Please let me know your decision regarding this at your earliest convenience. I trust your
judgment will be wise regardless of the direction you choose to steer us.
Finally, [I am making inquiries regarding arranging a meeting for you with the Chairman of
Cheniere. I will let you know as that develops.
Safe travels and best wishes my friend,
Hunter
76. RHB also manually typed, saved and downloaded hundreds of personal notes using
Apple notes. One note discussed Hudson West III to Kevin.
K-
Very simple:
10M per annum budget to use to further the interests of the JV. This move to 5M is completely new
to me and is not acceptable obviously.
All expenditures/ expenses salaries will be agreed to by board. My (Biden's) expenses and
determination of how BIDEN (loan) capital will be determined by Owasco in consultation with
Hudson. The Hudson capital will be utilized for expenses beyond those Biden/Owasco has
committed to Monochromes business. (K we won't break 5 and the additional 5 can roll to next
year if the Chairman and CEFC review is favorable.
You saw minor clarification of exclusivity.
We are all saying the same thing I hope . Please let's put this to bed tonight sign officially
tomorrow (or anytime as late tonight as you want) and get to work. I am tired of this Kevin. I can
make $5M in salary at any law firm in America. If you think this is about money it's not. The
Biden's are the best I know at doing exactly what the Chairman wants from this partnershipn .
Please let's not quibble over peanuts.
77. There was specific RHB financial information confirming the user and owner of this
MacBook Pro Laptop hard drive was owned solely and used exclusively by RHB.
According to multiple news sources this is the document identified by Mac repair Owner
John Mac Isaac.
RHB Personal Activities

78. EXIF data, which is also referred to as photograph metadata, is embedded in the
photographs taken by RHB. There were thousands of photographs on the Laptop which
indicate they were taken by Hunter using various iPhones from August 27, 2008 and
prior to March 17, 2019 and consisted of family, vacations, holidays and other RHB
specific social events.
79. One example showing Hunter in possession and photographing himself with his iPhone X
is shown below. This selfie picture is located in the Robert Hunter iCloud Download
folder on RHB's MacBook Laptop hard drive proves RHB owned and used an iPhone X
in June 2018.
80. Travel records like the one shown below verified Robert Hunter paid for flights and the
receipts were located throughout the MacBook Pro Laptop hard drive as well as
screenshots created from text messages received.
81. RHB’s selfie and photographic EXIF shows Hunter in physical possession of the iPhone
X and in use in 2018 at various locations in the USA and abroad.
82. In addition to selfies with Geo-location data, there were approximately 39,189 iMessage
chat conversations which were syncing and backed-up to the icloud.com account.
One conversation correlated with the above selfie and geo-location data matches the
address listed in a SMS message with an unknown person.
Personal Property
83. In 2016 RHB purchased a 2016 Chevrolet Silverado vin #
enabled OnStar acct and insured it with USAA was confirmed using
various emails, photographs, insurance cards, and a red light camera citation sent to him.
All of these discoveries further verify the MacBook Pro Laptop was owned and used
solely by RHB to conduct business and personal activities.
Handwriting Comparisons
84. While in the US Secret Service, one of my core investigative responsibilities was to
examine signatures in fraud investigations. I examined the signatures of RHB located on
the MacBook Pro Hard Drive and determined them to be authentic. Document I
examined included numerous document signatures as shown below and other documents
included in this report.
85. I also located numerous digital signatures created by RHB and stored in his iCloud Notes
downloads on the hard drive .
86. In addition to the signed CEFC engagement contract below, RHB communicated with his
personal assistant and others regarding business with the CEFC, Burisma and other
business related discussions.
87. The following thread details conversations regarding RHB business dealings, money and
other financial information with RHB’s personal assistant Katie Dodge. The chat
conversation is being included as an unredacted communication establishing another
element of my analysis verifying RHB is the owner and user of the MacBook Pro Laptop
given to the Mac Repair store on April 12, 2019.
↙ Received
↗ Sent
Me
4/12/2018 7:09:38 AM
Can we get some stiuff done today.
Ask Kathleen if she has heard about my license.
Ask Eric or Joan if anything has been given to Bill Morgan regarding my taxes.
Figure out where my birth certificate and social security card is.
What’s my new office/ billing address?
Please send Jim Biden my car/ driver insurance information and the USAA Audi car loan pay off amount. Those two are
really important.
Coordinate with Hallie today a time this weekend or earlier when movers can pack and put some stuff (overflowing) from
Annapolis house in storage with office stuff.
And finally ask Edward where he wants me to move my accounts including the million dollar retainer which I need to place
in a conservative money. market account. I’d like to move it all to Brown Brothers Harriman— allong with the three
million in the Cathay Pacific Bamk account. They need to be in separate accounts for bar rule related reasons.the principal
of the Owasco LLC should not be touched without my explicit consent.
Finally, finally there is a lot of fraud on my Amex card (Hallie’s account) and I’m going to send you the list of disputed
charges if there is need for follow up.
That’s a lot I know but if “we” can get started on at least a few today- most important uncle jim- than I’ll be happy.
Thanks
↙ Received
gmail.com
4/12/2018 7:21:01 AM
Wow. Did you have coffee this morning?
I will tackle some of this today for sure. I will keep you posted.
↙ Received
gmail.com
4/12/2018 7:27:25 AM
1) I am already in touch with Bill Morgan's office re:taxes.
2) office mailing address:

Owasco or RHB listed
Washington DC 20007
↙ Received
@gmail.com
4/12/2018 7:32:01 AM
3) saw KBB at the game. No license yet but she said there was some mail in the truck? Do you know when that would be
from?
↗ Sent
Me
4/12/2018 7:36:45 AM
No idea
↗ Sent
Me
4/12/2018 7:37:24 AM
Can you get # from woman now @ 4829 loughboro
↙ Received
gmail.com
4/12/2018 7:38:38 AM
Ok. Also I have an original birth certificate but no soc sec card
↗ Sent
Me
4/12/2018 7:39:53 AM
Ok
↗ Sent
Me
4/12/2018 7:40:23 AM
Can you call hallie right now to coordinate
↗ Sent
Me
4/12/2018 7:40:34 AM
I know she’s available
↙ Received
gmail.com
4/12/2018 7:40:40 AM
Ok.
↙ Received
gmail.com
4/12/2018 7:58:12 AM
Did you create a new password for WF?
↙ Received
gmail.com
4/12/2018 8:34:25 AM
USAA won't let me access your account info for Audi. I even tried to be Kathleen
↙ Received
gmail.com
4/12/2018 8:36:41 AM
1) I have emailed loughboro resident.
2) I should have Porsche insurance card emailed to me today.

↙ Received
gmail.com
4/12/2018 8:50:44 AM
Can you call me re: WF?
↙ Received
gmail.com
4/12/2018 8:53:40 AM
No mail at Loughboro.
↙ Received
gmail.com
4/12/2018 8:55:15 AM
Do you have a USAA login? Or the app? Can sell car from the app
↗ Sent
Me
4/12/2018 9:06:16 AM
Eric and Joan have the log in - did they give to you.
↙ Received
gmail.com
4/12/2018 9:08:49 AM
Yeah. They gave me everything they have and there is nothing for USAA
↗ Sent
Me
4/12/2018 9:09:12 AM
WF shut me out again — too many cooks in the kitchen. Too many profile changes and such. Happened l10 days ago too.
What do you need? I’m going to bank in a few. Need to verify identity in person.
↗ Sent
Me
4/12/2018 9:09:49 AM
Call Joan it’s not the bank accounts that Kath now uses. It’s
↗ Sent
Me
4/12/2018 9:10:00 AM
Just insurance and. Loan
↙ Received
gmail.com
4/12/2018 9:10:03 AM
I need to pay AT&T
↙ Received
gmail.com
4/12/2018 9:10:23 AM
I called USAA and emailed with Joan.
↗ Sent
Me
4/12/2018 9:10:42 AM
Ok let’s put it on auto pay going forward . Just call AT&T and give them the credit card
↙ Received
@gmail.com
4/12/2018 9:10:53 AM
But may need to pay down cc
↗ Sent
Me
4/12/2018 9:11:06 AM
And nothing. Ok I’ll try . Can you send me any info on account
↗ Sent
Me
4/12/2018 9:11:34 AM
Put on debit card and there is room on credit card
↗ Sent
Me
4/12/2018 9:11:51 AM
Wells Fargo credit line
↙ Received
gmail.com
4/12/2018 9:12:00 AM
I wish I had something. Unfortunately all files are packed. I usually just use your soc sec#
↙ Received
@gmail.com
4/12/2018 9:12:14 AM
Ok re: AT&T
↗ Sent
Me
4/12/2018 9:12:35 AM
Also ask Joan what log in info is for account which has my
↗ Sent
Me
4/12/2018 9:13:25 AM
My dad has been using most lines on this account which I’ve through the gracious offerings of Eric have paid for past 11
years
↙ Received
gmail.com
4/12/2018 9:15:10 AM
Ha Ok. Let me ask Joan.
↙ Received
gmail.com
4/12/2018 9:47:43 AM
Contact info for Jimmy?
↙ Received
gmail.com
4/12/2018 9:47:50 AM
I gave ins card
↙ Received
@gmail.com
4/12/2018 9:48:36 AM

↙ Received
gmail.com
4/12/2018 3:09:23 PM
The log in to access his numbers is jrbiden Pw:
↗ Sent
Me
4/12/2018 3:33:44 PM
↙ Received
gmail.com
4/12/2018 4:11:38 PM
Not sure. I'll ask. This is what I see on the invoice I receive.
↙ Received
@gmail.com
4/12/2018 4:11:53 PM

↙ Received
gmail.com
4/12/2018 4:56:41 PM
I have sent what I have to Bill Morgan's office FYI
↙ Received
gmail.com
4/13/2018 7:58:43 AM
Your driver's license was returned to the DMV. The mailman must have done that. The new home owner never saw it. So
now you have to start from scratch.
↙ Received
gmail.com
4/13/2018 8:39:08 AM
I hope you know how lucky you are to have me doing all this. I have been trying to set up health insurance and payroll with
all compliance and it's no easy task. 5 employees and 4 different states. Ugh.
↗ Sent
Me
4/13/2018 11:21:41 AM
I am thank you.
↗ Sent
Me
4/13/2018 11:21:56 AM
Qu still for real not connected
↗ Sent
Me
4/13/2018 11:22:27 AM
* question
Are you bing paid?
↗ Sent
Me
4/13/2018 11:23:05 AM
An you send me log in for att
↙ Received
gmail.com
4/13/2018 11:23:15 AM
I plan on being paid next Friday.
↙ Received
gmail.com
4/13/2018 11:24:10 AM
I don't have access to ATT can you check your email? I think the system asked you to verify it was ok for me to pay. Joan
sent the only one she has.
↙ Received
gmail.com
4/13/2018 11:26:22 AM
For real cannot access WF
↙ Received
gmail.com
4/13/2018 11:27:22 AM
I am driving to UNC Wilmington for accepted students day for Elizabeth. If you don't hear from me - I never came back.
↙ Received
gmail.com
4/16/2018 6:59:52 AM
Hi. Do you have new login for WF? I need it for taxes. Thx.
↙ Received
gmail.com
4/16/2018 7:08:22 AM
Apparently you owe a lot for taxes. So I will have to set up payments (?). Talking with Bill Morgan shortly.
↙ Received
gmail.com
4/16/2018 7:20:22 AM
Yahoo. I was able to change online password. It's back to
↗ Sent
Me
4/16/2018 4:42:35 PM
Don’t set up payments for anything until Bill and i talk please- can you schedule call with him.
↗ Sent
Me
4/16/2018 4:44:14 PM
Also can you get Joan and or Eric to tell my lawyer George Mesires (give him a call also) for how we remove them from
Broker Dealer and take over the regulatory etc...
↙ Received
gmail.com
4/16/2018 7:08:20 PM
I will try to schedule a call with Bill. He is out of the office most of tomorrow. Can you do something before 11 AM ET?
↙ Received
gmail.com
4/16/2018 7:09:32 PM
Also. I am in no position to add more work to my schedule re: the BD. I am still trying to get you and your family health
insurance and it doesn't seem to be working.
↗ Sent
Me
4/16/2018 7:12:02 PM
Ok thanks. Just set up a conference call for me then 0
Please
↙ Received
gmail.com
4/16/2018 7:34:09 PM
Ok. I sent him a message. I may not hear until tomorrow so stay tuned.
↙ Received
gmail.com
4/16/2018 7:35:15 PM
Just as an FYI his number is
↙ Received
gmail.com
4/17/2018 5:16:39 AM
10:30 AM ET // +1 - Call with Bill Morgan.
↙ Received
gmail.com
4/17/2018 7:58:36 AM
Your call is in 30 minutes.
↙ Received
gmail.com
4/17/2018 8:29:24 AM
Are you ready? Will you dial direct or do you want me to do it?
↗ Sent
Me
4/17/2018 8:29:34 AM
I’m calling
↗ Sent
Me
4/17/2018 8:29:39 AM
Thx
↙ Received
gmail.com
4/17/2018 8:29:43 AM
Cool. Thanks
↙ Received
gmail.com
4/23/2018 7:38:32 AM
Hi. Do you think you could establish a log in for USAA. Joan does not have it and I am very very close to getting truck
registered
↙ Received
gmail.com
4/23/2018 7:39:00 AM
BTW you can tell your Dad that we have a Blue Hen Class of 2022.
↙ Received
@gmail.com
4/23/2018 7:41:20 AM
I am trying to get the vehicle insurance card.
↗ Sent
Me
4/23/2018 10:33:10 AM
Awesome
↗ Sent
Me
4/23/2018 10:33:32 AM
I will try Calling USAA
↙ Received
gmail.com
4/23/2018 4:08:14 PM
Any luck with USAA?
↙ Received
gmail.com
4/24/2018 7:32:15 AM
I have USAA on the line can I call you now please so they can have permission?
↙ Received
@gmail.com
4/24/2018 11:56:42 AM
Hey buddy. The USAA card is the only piece I need to get the truck registered and they can mail it tomorrow. Do you think
you can contact USAA or create a log in? Would be great. Thanks.
↙ Received
gmail.com
4/24/2018 11:57:02 AM
I called USAA and they won't give it to me.
↗ Sent
Me
4/24/2018 12:05:04 PM
Sorry working I. It now
↙ Received
gmail.com
4/24/2018 12:26:48 PM
Yippee! Thanks
↙ Received
gmail.com
4/25/2018 6:16:15 AM
Any luck with USAA?
↙ Received
gmail.com
4/25/2018 8:56:29 AM
USAA
800-531-8722
↗ Sent
Me
4/25/2018 1:54:23 PM
Did you get email any luck on a drivers license
↙ Received
gmail.com
4/25/2018 1:56:02 PM
Yes I got your email!! Nice job! I used a photo of your license. I cannot Renee your license. It was returned to DMV and
they will not reissue until you reapply with new address.
↗ Sent
Me
4/25/2018 2:16:08 PM
How do I do that from CA?
↗ Sent
Me
4/25/2018 2:16:36 PM
W/o am address in DC or anywhere for that matter?
↙ Received
gmail.com
4/25/2018 2:19:39 PM
I guess where ever you call home will have to become your new address on a new license. For now the truck is registered at
Loughboro.
↙ Received
gmail.com
4/25/2018 3:20:33 PM
I'd pick California BTW.
↙ Received
gmail.com
4/27/2018 6:11:09 AM
Good morning. Tomorrow the KBB money is supposed to be withdrawn from your personal account. Currently there is $9k
there and $15k in Owasco.
↗ Sent
Me
4/27/2018 5:14:59 PM
I did
↙ Received
gmail.com
4/27/2018 5:16:36 PM
Thx
↙ Received
gmail.com
5/3/2018 10:05:49 AM
Hi. By Today COB you will need about $45k to pay bills, Sidwell and payroll and life insurance. The accounts are negative
balance.
↙ Received
gmail.com
5/3/2018 10:06:01 AM
ssword
↙ Receive
gmail.com
5/3/2018 1:04:05 PM

↗ Sent
Me
5/10/2018 9:05:13 PM
Katie please do not refer anything to Eric with out speaking to me first
↙ Received
gmail.com
5/15/2018 4:07:12 PM
Hi there. The truck situation is moving along. On a different note - I wanted to alert you that I am reimbursing myself for
some office supplies that I have had to purchase. - its $80. Thanks!
↗ Sent
Me
5/15/2018 7:02:18 PM
Thx
↙ Received
gmail.com
5/16/2018 11:01:48 AM
I think NYT is going to contact me.
↗ Sent
Me
5/16/2018 11:08:00 AM
Give them George Mesires number and do not give them anything else at all no addresses no names no locations nothing at
all please- not Eric or Katie or that George is a lawyer or my dads office. Really Katie not a single bit of information in any
way. In fact don’t even answer - text them this . Please give me your name number and email address and the nature of your
inquiry with specificity. Someone will respond shortly. Especially do not give them Eric’s #
↙ Received
gmail.com
5/16/2018 11:18:30 AM
OK I got it.
↙ Received
gmail.com
5/16/2018 11:21:27 AM
On a diff note - Are you going to Monaco for Burma?
↙ Received
gmail.com
5/16/2018 11:21:32 AM
Burma
↙ Received
gmail.com
5/16/2018 11:21:41 AM
Burisma - ugh
↗ Sent
Me
5/16/2018 11:26:20 AM
When is it? Also do not send any portion of check to Devon going forward. I’ll explain later
↙ Received
gmail.com
5/16/2018 11:26:58 AM
OK good to know that would have happened next week (Devon) - Its June 2
↙ Received
gmail.com
5/16/2018 11:27:42 AM
I would like to remind you that we've booked Hunter at the Metropole
from May 31 till June 2. Below are flight options:
1) LH 417 30MAY 3 IADFRA HK1 1540 0530+1 744 E 0 M

LH1058 31MAY 4 FRANCE HK1 1 0815 0945 32A E 0 S
LH1059 02JUN 6 NCEFRA HK1 1 1025 1200 319 E 0 S

LH 418 02JUN 6 FRAIAD HK1 1 1315 1600 74H E 0 M
2) UA 052 30MAY 3 IADZRH HK1 1805 0805+1 788 E 0 D

UA9738 31MAY 4 ZRHNCE HK1 0855 1005 319 E 0 M
UA9057 02JUN 6 NCEFRA HK1 1 1025 1200 319 E 0 O

UA8827 02JUN 6 FRAIAD HK1 1 1315 1600 74H E 0 M
3)KL7445 30MAY 3 IADJFK HK1 1610 1756 CRJ E 0

KL6113 30MAY 3 JFKNCE HK1 4 1956 1020+1 764 E 0 D - arriving
on the 31t to Nice
DL8591 02JUN 6 NCECDG HK1 2 1215 1350 321 E 0

DL8358 02JUN 6 CDGIAD HK1 2E 1620 1850 772 E 0 D
↙ Received
gmail.com
5/16/2018 11:27:49 AM
May 31-June 2
↙ Received
gmail.com
5/16/2018 3:41:38 PM
Haven't responded. Here's the email I received.
Katie
Hi. I'm told by Eric Schwerin that you are still an assistant to Hunter Biden or do work for him. I and my colleagues are
trying to reach him for a story we are working about about the criminal case against Patrick Ho, a Chinese national who
was arrested at JFK in November on foreign bribery charges on behalf of CEFC. When Ho was arrested one of his first
calls was to Hunter's uncle, James Biden. I spoke to James and he told me that Patrick had called him in order to get in
touch with Hunter who had been Ho's lawyer. It appears Hunter was instrumental in lining up some of Ho's initial criminal
defense lawyers. The case against Ho is still pending and is a high profile one. Hunter hasn't made any appearance in the
criminal case but given that his own uncle has told us that Hunter is Ho's lawyer we want to talk to Hunter about Ho and as
to how he got involved in becoming a lawyer to Ho. We are are also told that Hunter knows Je Jianming, the chairman of
CEFC, the giant Chinese oil company that is paying for Ho's legal defense
We are working on a story in which we will discuss these connections and wanted to get Hunte
please let me know how we can get in touch with Hunter or have him call me on my cellphone
thanks
matt
--
Matthew Goldstein
The New York Times
(w)
(c)
@mattgoldstein26
↙ Received
gmail.com
5/17/2018 11:01:55 AM
Did you see 1) Monaco stuff 2) my text summarizing request from NYT?
↙ Received
@gmail.com
5/17/2018 11:21:01 AM
Also, I run payroll every 2 weeks on Wednesdays to arrive Fridays. Currently there is not enough money in Owasco. Can I
move some from LLC?
↗ Sent
Me
5/17/2018 11:24:59 AM
Move 50 please
↙ Received
gmail.com
5/17/2018 11:25:08 AM
Ok.
↙ Received
gmail.com
5/17/2018 12:35:47 PM
Also Devon just asked me about the Burisma $?
↙ Received
gmail.com
5/22/2018 6:44:07 AM
Good morning. Was wondering 1) about Monaco - are you going?
2) did you speak with Devon about burisma $?
↙ Received
gmail.com
5/22/2018 7:39:08 AM
*** do you have a new debit card & PIN? I am locked out of WF online.
↗ Sent
Me
5/22/2018 8:44:57 AM
Yes . Let’s discuss in 1 hr please.
↙ Received
gmail.com
5/22/2018 8:46:01 AM
Ok
↙ Received
gmail.com
5/22/2018 9:55:25 AM
On my way home. Will call in 10 min.
↙ Received
gmail.com
5/22/2018 10:13:54 AM
I am home. Can you talk?
↙ Received
gmail.com
5/22/2018 10:57:03 AM

↙ Received
gmail.com
5/22/2018 11:54:21 AM
I have everything for your license. 1) birth certificate. 2) W2 with ss# 3) car loan statement with address and less than 60
days old 4) official letter from DC Gov. Everything will relate to 2900 k st address.
↙ Received
gmail.com
5/22/2018 11:54:55 AM
Now what?
↙ Received
gmail.com
5/22/2018 12:28:51 PM
I am going out of town this week. I will not be around Friday
↙ Received
gmail.com
5/22/2018 12:33:50 PM
Funny needs $2100 for European apartment this summer.
↙ Received
gmail.com
5/23/2018 11:58:19 AM
WF login??
↗ Sent
Me
5/23/2018 12:01:38 PM
Try this but only once
If it doesn’t work let me know.
↗ Sent
Me
5/23/2018 12:04:01 PM
Tell Vadim will go 5/31- 6/5
PHL- Nice
Nice- LAX
↙ Received
gmail.com
5/23/2018 12:07:02 PM
I will tell Vadim. But there was no login for WF above
↗ Sent
Me
5/23/2018 12:07:34 PM
↙ Received
gmail.com
5/23/2018 12:12:37 PM
Sorry. Not it
↙ Received
gmail.com
5/23/2018 12:12:50 PM
Is it a capital “p”?
↙ Received
gmail.com
5/23/2018 12:24:34 PM
When are you in DC? Where should I drop license documents
↙ Received
gmail.com
5/23/2018 12:24:42 PM
I am not here Friday
↗ Sent
Me
5/23/2018 12:30:26 PM
Hold
↙ Received
gmail.com
5/24/2018 8:30:05 AM
Wells Fargo Fraud Dept. called for you and would like to speak to you. Please call them back.
WellsFargo Victim Fraud

877-499-6920
4 am - 9 pm pacific
6am - 4:30 pacific
↙ Received
gmail.com
5/24/2018 8:32:09 AM
Also I need to mail a check for $2100 for Finn’s summer apartment.
↙ Received
gmail.com
5/24/2018 11:20:59 AM
Hunter, could you please help me with the WF login?
↙ Received
gmail.com
5/24/2018 1:56:35 PM
Check arrived from jewelers
↗ Sent
Me
5/24/2018 5:59:07 PM
Please deposit in WF
↙ Received
gmail.com
5/24/2018 6:10:37 PM
I could use a log in please.
↙ Received
gmail.com
5/24/2018 7:40:18 PM
I couldn’t hear you. Please try again.
↙ Received
gmail.com
5/25/2018 4:28:19 AM
You should call WF
Wells Fargo Fraud Dept. called for you and would like to speak to you. Please call them back.
WellsFargo Victim Fraud
877-499-6920
4 am - 9 pm pacific
6am - 4:30 pacific
↗ Sent
Me
5/25/2018 7:26:37 AM
Yes. Where can you leave my DMV stuff . I’ll go in Sat
↙ Received
gmail.com
5/25/2018 8:15:39 AM
I have already left town. However the envelope is ready if you want to send a courier to my house and I can have my kids
or mom hand it to them.
↙ Received
gmail.com
5/25/2018 9:09:01 AM
Vadym cannot do your dates and flight for Monaco. You have to pick from the 3 he had listed. And go from 5/30-june2
↙ Received
gmail.com
5/26/2018 8:07:27 AM
This is what is available for Monaco. You may need to leave in the 29th possibly.
↙ Received
gmail.com
5/26/2018 8:07:40 AM
*on the 29th
↙ Received
gmail.com
5/26/2018 8:08:25 AM
What flight do you like from Noce to LAX?
↙ Received
gmail.com
5/26/2018 8:08:29 AM
Nice
↙ Received
gmail.com
5/27/2018 10:46:21 AM
Are you seeing this? You don’t have to go to Monaco but if you do we better let them know your flights.
↙ Received
gmail.com
5/27/2018 10:46:53 AM
You only have a hotel from May 31 - June 2
↗ Sent
Me
5/27/2018 11:11:11 AM
5/30 is anniversary of Beau’s death. So you if he insists I’ll let my family know. Also I can get my own hotel room btw- 2-4
↙ Received
gmail.com
5/28/2018 11:02:11 AM
Ok. Flights for 5/31 don’t get you there in time for meeting. Can you do IAD instead of philly?
↙ Received
gmail.com
5/29/2018 6:37:52 AM
Good morning. Are you still in DC?
1) Do you need your license documents?
2) any luck with WF login?

↗ Sent
Me
5/29/2018 7:22:31 AM
Yes
↗ Sent
Me
5/29/2018 7:23:02 AM
Going in to branch today better after I have license obviously
↗ Sent
Me
5/29/2018 7:23:18 AM
Also need passport
↙ Received
gmail.com
5/29/2018 7:24:28 AM
Let me see what you can use to get a passport.
↙ Received
gmail.com
5/29/2018 8:26:48 AM
Vadym says no worries that you cannot make the BoD meeting. So he is NOT insisting. He does not expect you to come to
the Forum as it is not so important either.
↗ Sent
Me
5/29/2018 10:17:03 AM
Ok
↗ Sent
Me
5/29/2018 10:19:35 AM
5 mins
↙ Received
gmail.com
5/29/2018 10:25:25 AM
Now?
↙ Received
gmail.com
5/29/2018 10:25:33 AM
I have USAA on line pls
↗ Sent
Me
5/29/2018 1:36:17 PM
Where are license docs?
↙ Received
gmail.com
5/29/2018 1:36:29 PM
My house
↗ Sent
Me
5/29/2018 1:36:40 PM
Uh oh
↙ Received
gmail.com
5/29/2018 1:36:50 PM
Where are you
↗ Sent
Me
5/29/2018 1:37:03 PM
DC
↙ Received
gmail.com
5/29/2018 1:37:43 PM
Do you want me to drop them at your dads mailbox?
↗ Sent
Me
5/29/2018 1:37:57 PM
Perfecto
↙ Received
gmail.com
5/29/2018 1:38:13 PM
Like now? Or sometime. Doesn’t matter
↙ Received
gmail.com
5/29/2018 1:38:20 PM
To me
↙ Received
gmail.com
5/29/2018 1:38:55 PM
Some are original. Please don’t lose them. You can prob use them for passport. Now I sound like your mom
↙ Received
gmail.com
5/29/2018 1:58:06 PM
Almost there now.
↙ Received
gmail.com
5/29/2018 2:08:02 PM
BTW you will need to use as your address. Ok?
↙ Received
gmail.com
5/29/2018 2:10:49 PM
It’s there
↗ Sent
Me
5/30/2018 11:41:09 AM
How do I do that Katie? Do I have utility bill or
↙ Received
gmail.com
5/30/2018 11:42:00 AM
I gave you all docs that work and they all consistently have that address.
↙ Received
gmail.com
5/30/2018 11:42:46 AM
W2 and birth certificate are for your identity. The Porsche and letter from the Census price your address
↙ Received
gmail.com
5/30/2018 11:42:59 AM
*Prove
↗ Sent
Me
5/30/2018 12:29:03 PM
Ok got i sent that way back and it didn’t go through until now
↙ Received
gmail.com
5/30/2018 12:54:42 PM
So you had success?
↙ Received
gmail.com
5/30/2018 12:56:41 PM
Send me a pic of it
↙ Received
gmail.com
5/30/2018 2:48:30 PM
What address could you use that won’t be a forwarding situation? K St will be forwarded mail again.
↙ Received
gmail.com
5/30/2018 2:48:44 PM
That’s a problem
↙ Received
gmail.com
5/31/2018 11:01:59 AM
Did you receive an email with CT Bar password info just now?
↙ Received
gmail.com
5/31/2018 11:57:31 AM
What account do you want the Jewlers $ deposited in?
↗ Sent
Me
5/31/2018 1:14:52 PM
Personal
↗ Sent
Me
5/31/2018 1:47:40 PM
Did not - what address
↙ Received
gmail.com
5/31/2018 1:49:56 PM
Prob Rosemont email address?
↗ Sent
Me
5/31/2018 2:56:33 PM
Do you have picture of insurance card for Chevrolet Silveradop
↗ Sent
Me
5/31/2018 2:57:39 PM
Nvm but do you have pay off amounts for both trucks
↙ Received
gmail.com
5/31/2018 2:58:56 PM
Colorado was paid off. Roughly $25k.
Will need to check Silverado.
If you can log on to USAA you can get ins cards

↗ Sent
Me
5/31/2018 3:39:27 PM
Thanks
↗ Sent
Me
5/31/2018 3:39:42 PM
What’s USAA log in?
↙ Received
gmail.com
5/31/2018 3:41:15 PM
I don’t have that. You told me that you have it on your phone. I’d have to call them tomorrow if you want them to email
them to me.
↗ Sent
Me
5/31/2018 3:41:42 PM
I have the app but can’t get in, I’ll figure it out.
↙ Received
gmail.com
5/31/2018 3:42:39 PM
Ok. Let me just check my emails to see if it was ever sent to me.
↗ Sent
Me
5/31/2018 3:44:06 PM
Yeah I did on mine and didn’t see . And I can’t add email —/ don’t have password—/ did Eric shut
that down?
↙ Received
gmail.com
5/31/2018 3:44:18 PM

↙ Received
gmail.com
5/31/2018 3:45:16 PM
No. I don’t think so
↙ Received
gmail.com
5/31/2018 3:47:33 PM
That insurance card looks like it expires on June 2. But I renewed it. So don’t panic.
↙ Received
gmail.com
5/31/2018 4:11:06 PM
Don’t worry about the email for now. I can mail a check to CT Bar
↙ Received
gmail.com
6/1/2018 9:50:36 AM
Should Liz be getting an auto pay of $2900 in addition to her pay? It was set up before I came back.
↗ Sent
Me
6/1/2018 12:51:01 PM
She is being sued by her former land lord for back rent —- I am lending her money because that’s what I do because I am
an idiot or I am just generous and would rather her and her family not end up homeless.
↙ Received
gmail.com
6/1/2018 12:52:39 PM
Got it. The landlord is the idiot.
↙ Received
gmail.com
6/1/2018 1:54:56 PM
Do you have access to Zelle? I need some office supplies - paper, file folders and stamps.
↙ Received
gmail.com
6/1/2018 2:03:31 PM
It came to $80.
↗ Sent
Me
6/1/2018 5:44:23 PM
Joel her now ex who pays no alimony has not had or looked for a job in 4 years she has 3 children one of whom is severely
autistic violent. What do I do???
↙ Received
gmail.com
6/1/2018 5:44:56 PM
He’s a dead beat.
↗ Sent
Me
6/1/2018 5:45:05 PM
�
↙ Received
gmail.com
6/1/2018 6:50:08 PM
Thank you.
↙ Received
@gmail.com
6/6/2018 5:23:56 AM
1) pic of new drivers license
2) pic of tags and registration for new truck
please. Thanks. Will call you later this morning.

↙ Received
gmail.com
6/6/2018 1:16:54 PM
I called the office space folks. No mail. I did receive some mail to my house today but the bank cards were not there either.
↙ Received
gmail.com
6/11/2018 12:05:36 PM
Hi there. You need to call USAA and cancel the insurance on the two trucks. The bozos there still won’t let me do it.
↙ Received
gmail.com
6/13/2018 9:52:11 AM
Do you have a new address for this renter’s insurance? Or should I cancel it?
↗ Sent
Me
6/13/2018 3:27:53 PM
No still renting
↙ Received
gmail.com
6/14/2018 7:32:34 AM
The policy is only valid address for policy is K St. So I would need a new apartment address to update it.
↗ Sent
Me
6/14/2018 7:58:34 AM
well I thought it was for Annapolis house
↙ Received
gmail.com
6/14/2018 7:59:47 AM
Oh. You are right. I miss read the invoice. Sorry.
↗ Sent
Me
6/14/2018 3:08:44 PM

↙ Received
gmail.com
9/21/2018 9:10:44 AM
It's Katie.
↙ Received
gmail.com
9/28/2018 4:40:02 PM
Can you check email.
↗ Sent
Me
9/28/2018 4:43:14 PM
I sent her 2500
↙ Received
gmail.com
9/28/2018 4:43:26 PM
Sweet.
↙ Received
gmail.com
9/29/2018 9:10:59 AM
How about KBB for travel?
↗ Sent
Me
9/29/2018 11:43:07 AM
I’ll take care of it
↙ Received
gmail.com
9/29/2018 11:55:22 AM
Great. Thanks
↙ Received
gmail.com
10/1/2018 9:10:26 AM
Hi. WF is asking me if it’s ok to put through a roughly $2900 charge thru the RSP account? Is that you? Not sure if I should
approve it and move money to cover it.
↗ Sent
Me
10/1/2018 9:43:04 AM
Yes
↙ Received
@gmail.com
10/1/2018 3:51:35 PM
Hi. Finnegan now needs $1400 for next year’s down payment for an apt. She has to turn it in tomorrow.
↙ Received
gmail.com
10/1/2018 4:12:22 PM
I could do this if I had authorization to bank accounts. BTW. Friendly reminder.
↙ Received
gmail.com
10/2/2018 9:44:53 AM
Any chance you can call me?
1) transfer $ for Finnegan’s rent $1400
2) Where to send/sign & how to pay your tax return.

↗ Sent
Me
10/2/2018 9:47:07 AM
Yes
↙ Received
gmail.com
10/2/2018 10:55:49 AM
Finnegan just called me. Did you get a chance to send $1400?
↙ Received
gmail.com
10/3/2018 9:21:54 AM
Bill Morgan
Today - 10:30 AM PT/
1:30 PM ET
↙ Received
gmail.com
10/3/2018 11:23:58 AM
You good for this call with Bill?
↗ Sent
Me
10/3/2018 11:27:35 AM
Did I get a copy of the revised returns
↙ Received
gmail.com
10/3/2018 11:28:45 AM
I am not sure. Do you want one emailed to you? Is it re:2017? Or 2016?
↙ Received
gmail.com
10/3/2018 11:29:58 AM
I was under the impression this call was re: 2017 Oct filing.
↙ Received
gmail.com
1/29/2019 1:42:31 PM
Is it ok for me to pay for your storage? It’s $1585?
↗ Sent
Me
1/29/2019 3:12:34 PM
Hold please. And dad got tuitions
↙ Received
gmail.com
1/29/2019 3:13:02 PM
Ok.
Good
And he took care of health.
↗ Sent
Me
1/29/2019 4:51:39 PM
Can you get my ski bag- and ski boots - from storage. Fed-ex can pick them up and deliver here or there’s another company
that does that and I can get them if someone puts skis and boots where they can pick up.
↙ Received
gmail.com
1/29/2019 4:58:32 PM
Wow. How soon do you need them? And are you sure they are in storage? We’re they at K Steet?
↙ Received
@gmail.com
1/29/2019 4:58:36 PM
Were
↗ Sent
Me
1/29/2019 5:06:31 PM
Yes they were and asn soon as they can be pickled pop they are delivered over night
↗ Sent
Me
1/29/2019 5:06:40 PM
Its this service that does fit for ski vacaations
↙ Received
gmail.com
1/29/2019 5:08:28 PM
Ok. I will ask Sloan’s. How can I pay the storage facility and the service? Can you forward me $$ or a credit card #?
↙ Received
gmail.com
1/29/2019 5:09:05 PM
Also what resort do they need to go to? What are the dates?
↗ Sent
Me
1/29/2019 5:09:06 PM
I have neither. What for? Take it out of you b3?K
↗ Sent
Me
1/29/2019 5:09:07 PM
3k
↗ Sent
Me
1/29/2019 5:10:01 PM
I can get the service there- will Sloans open up- will they fold what I now know I owe into a moving charge
formeverythjomg
↙ Received
gmail.com
1/29/2019 5:11:06 PM
That’s what I am wondering. They may ask for the storage money too. Which is around $1570
↙ Received
gmail.com
1/29/2019 5:11:28 PM
I can ask Danny.
↗ Sent
Me
1/29/2019 5:12:08 PM
Ok tomorrow pay 1K tomorrow…..not tonight
↗ Sent
Me
1/29/2019 5:13:05 PM
And realize my dad is only lending me tuitions and health care…alimony and all else is still on me…its a loan
↙ Received
gmail.com
1/29/2019 5:13:11 PM
Poles skis and boots.
↙ Received
gmail.com
1/29/2019 5:13:15 PM
Right?
↙ Received
gmail.com
1/29/2019 5:13:39 PM
Yes I know. You’ll be good for it Hunter.
↙ Received
gmail.com
1/29/2019 5:17:34 PM
I can write a check to storage but I can’t physically be there to give it to them until about 5:30 PM tomorrow.
↗ Sent
Me
1/29/2019 5:19:19 PM
I can give you debit card #- do in have baby cards connected ton any accounts
↙ Received
gmail.com
1/29/2019 5:20:18 PM
Not that I know of. I only have access through Cindy. I still don’t have access to anything on bank side.
↙ Received
gmail.com
1/30/2019 8:25:33 AM
Please listen to my voice mail or call me by 11 AM. Otherwise I can’t help until 4pm. Thanks.
↙ Received
gmail.com
1/30/2019 8:27:14 AM

↙ Received
gmail.com
1/30/2019 1:14:08 PM
Did you call Danny. He’s said he hasn’t heard from you.
↙ Received
gmail.com
1/31/2019 6:57:05 AM
Hi. Skis are ready. You should call Danny to arrange pick up. It cost $360 to uncover them out of your crates.
↙ Received
gmail.com
1/31/2019 7:01:25 AM
I am going out of town today. I will be back Monday.
↙ Received
gmail.com
2/4/2019 6:05:14 AM
Happy Birthday Hunter!
↙ Received
gmail.com
2/8/2019 11:00:17 AM
Hi! Now that you asked for your skis, the weather warmed up. Murphy’s law.
Did you receive your skis?
Can we pay some bills today or tomorrow? Let me know the status of things please. Thanks.
↗ Sent
Me
2/8/2019 11:08:49 AM
Cam I get a list of my bills please.
↙ Received
@gmail.com
2/8/2019 11:11:49 AM
Ok. Will se d soon.
↙ Received
gmail.com
2/8/2019 12:10:06 PM
ADP - $2072
↙ Received
gmail.com
2/8/2019 12:10:20 PM
hold on - will do this differently…
↙ Received
gmail.com
2/8/2019 12:16:56 PM
This is the list not including taxes and professional services bills (law, acct. etc)
↙ Received
gmail.com
2/8/2019 1:16:24 PM
Let me know if you have any questions and what priority You want to set. I think the dudes at Sloan storage should get
paid.
↙ Received
gmail.com
2/13/2019 9:16:27 AM
Hey there Hunter. How are you? Please give me a call when you have a chance. Thanks man.
↙ Received
gmail.com
2/14/2019 9:31:31 AM

↙ Received
gmail.com
2/14/2019 9:43:12 AM
Hello Hunter. Happy Valentines Day!
Please give me a call to let me know how payments should proceed please.
Sloan is a concern $2700. Porsche is a concern $3500. And health is due soon $2700. And hopefully you could also pay me
(3 weeks. $2250. Last pay was Jan 25). Please let me know Thank you. I’d appreciate it.
↗ Sent
Me
2/14/2019 5:22:49 PM
Sloan
Porsche
Health
You
No 529
↙ Received
gmail.com
2/14/2019 5:26:55 PM
Ok. Thank you. I will need to write checks and mail the bill tomorrow for those so the funds will need to be available for a
few days. FYI.
↙ Received
gmail.com
2/15/2019 6:36:37 AM
To stop 529 withdrawal, they need to speak directly to you at American Funds. Below is the number. I hit ‘2’ then the
account # when prompted. Thx
800-421-4225
Account #
↙ Received
gmail.com
2/20/2019 8:16:08 AM
Hi. It’s snowing here. Did you ever pick up your skis?
Were you able to call about the 529 plan to stop the payment (see above text)?
↗ Sent
Me
2/20/2019 12:46:49 PM
No didn’t ! I’ve got limited access to communications on all forms
↗ Sent
Me
2/20/2019 12:47:25 PM
Ivan you get the skis done I’ll send you a dress tomorrow
↗ Sent
Me
2/20/2019 12:47:53 PM
Give me # for 539 again
↙ Received
gmail.com
2/20/2019 12:48:29 PM
I could help with skis but I will also need a credit card and the name of the service you wanted to use (?)
↙ Received
gmail.com
2/20/2019 12:48:41 PM
To stop 529 withdrawal, they need to speak directly to you at American Funds. Below is the number. I hit ‘2’ then the
account # when prompted. Thx
800-421-4225
Account #
↙ Received
@gmail.com
2/22/2019 8:57:46 AM
Hi there. Did the 529 call work?
Also, are you working with George M to prioritize and pay bills?
↗ Sent
Me
2/22/2019 2:13:04 PM
Yes and when will burisma come
↙ Received
gmail.com
2/22/2019 2:13:56 PM
Ok. Good. I have reached out to Vadym twice. It should be here this week.
↙ Received
gmail.com
2/22/2019 2:14:09 PM
*should have been here
Media Sources and Previous Reports Verification

88. I was able to confirm other news sources and reports which stated RHB was on the board
of Burisma Holdings and documents on the MacBook Pro hard drive further show RHB
to be the owner and user of the laptop.
89. RHB also kept private Burisma related Apple notes. One such note, which was written to
Tony, was stored with all of the other RHB Apple notes downloads and titled ‘fuck you
tony i wasn't asleep and those guys work for the ukranians…-2017-08-07T22:48:47Z.txt’.
fuck you tony i wasn't asleep and those guys work for the ukranians and they think i haven't left my
room in 3 days
i was on nikolays boat arguing about my position in there kazak deal and it was heated- jesus you
play this bs card all the time- and exactly waht other meeting have i ever missed Tony
How about this Tony- I have zero interest in being your whopping boy. I don't know why you feel
you have the right to talk to or treat anyone the way you seem entitled to treat me- but I don't care
if you can make me all the money in the world. The fact is I sincerely do not like you as human
being. You're a bully with an inferiority complex and you seek out what you think is the weakest
link.
I am not the weakest link despite the my "friends" loving stories of me. And regardless of what you
think believe heard made up exploited I am not your partner, employee, friend, acquaintance, or
dupe.
You take things too far for me Tony. I couldn't call because I was fighting for the only income I
have left right now from Burisma. It was a very heated and very tense and extremely unavoidable
meeting negotiation that had a lot more at stake than me meeting you to say I'm not sending that
letter to the Chairman under any circumstances.
Financial Records
90. There were dozens of bank statements, credit card statements, purchases and other
transactions such as the below wire transfer which further proves RHB to be the sole
owner and user of the MacBook Pro.
Filename -
IMG_0003.JPG
Make - Apple
Model - iPhone 7
Software - 11.4.1
DateTimeDigitized
2018:07:27
17:05:28
91. There are approximately 117,790 emails to, from, CC, BCC various RHB email accounts.
Apple mail was used as the application for email existing on the MacBook. This includes
partial emails in which the entire email and attachments are not downloaded but synced
with the Apple mail application. When this occurs, the email title will contain the word
‘partial’. One such example is shown below where there are also two attachments titled
‘RHB Assets_Liabilities- Aug 2016.xlsx and doc00531120160815161339.pdf’ but not
downloaded.
92. There are over a hundred personal notes written by RHB using Apple Notes.
The data contained within the notes are preserved and protected within the
iCloud backups and are not being shared with any other persons. Data within
the notes is also unique to RHB which is another fact connecting the
MacBook Pro Laptop to RHB and only him. The image below demonstrates
one such note with RHB redacted Wells Fargo account information and
where RHB stored the downloaded notes.
Laptop Technical Issues or Data Loss
93. There were numerous indications that RHB was having issues with this MacBook Pro
Laptop prior to submitting to the Mac Repair Shop for service.
94. On October 29, 2018 RHB using @icloud.com email account purchased a license
for, downloaded, activated and used the Mac recovery program EaseUS Data Recovery
Wizard.
95. Dozens of error, system and driver logs were generated and stored on the Desktop.
96. On July 26, 2018 RHB also advised an unknown person via SMS he was at a computer
repair store which may indicate previous computer issues.
97. The last usage of the MacBook by RHB was on March 17, 2019 which coincides with the
Mac Repair shop drop off date April 12, 2019.
98. This activity further verifies RHB is the last person in control of the MacBook prior to
providing it for repair and using it related to email activity using the iCloud.com
account, his personal gmail.com, financial transactions, medical bills,
travel, and other user definable actions.
99. Examples are provided in the following pages which also show various forms of
notifications to email accounts, share ride notifications and receipts from Apple. There
are thousands of user identifiable examples which can be produced if required.
Expert Conclusion
I conducted my analysis with methodology I use in all examinations. This methodology

is reproducible and verifiable and further analysis is not required to establish my conclusions.
I identified a folder on the Desktop titled ‘Hunter Burisma Emails’ which was created
after RHB took his MacBook Pro to get repaired. This demonstrates someone created a new
folder and placed emails within the folder. This is not a forensics procedure however, the data
contained within the folder is a duplicate of emails which are valid, not altered or corrupt and are
verifiable.
Previous examinations of the drive, such as the one from Washington Post, focused
exclusively on using DKIM to authenticate emails on Hunter Biden’s drive as quoted in the
report ‘Attempts to verify the emails relied mainly on a technology called DKIM, which stands
for DomainKeys Identified Mail’. DKIM verification is only a portion of authenticating email
integrity. More importantly ‘digital sandwiching’ which I use frequently in criminal and civil
case analysis, compares email or file content in relation to activity before and after an email is
drafted, sent, received, or replied to, when a file is created or when an event has verifiable
geo-location and time stamps as examples.
One example of the many digital sandwiching events I reviewed is referenced in
paragraphs 64-67 wherein purchases, geo-location data, chat messaging, email and photographic
evidence all combine to create sandwiched activity.
During my analysis I examined as much data as possible within a timeline discussed with
the Washington Examiner. The data reflected in this report is merely a snapshot of available
findings and additional analysis can be performed to produce more evidence that the MacBook
Pro Laptop and hard drive contents do in fact belong to Robert Hunter Biden and no other users
can be connected to the laptop ownership.
My analysis also revealed there is a 100% certainty that Robert Hunter Biden was the
only person responsible for the activity on this hard drive and all of its stored data.
In order to establish any potential financial, business, or other crimes committed by
Hunter Biden, records from various Cloud, Financial, Cellular and other providers should be
obtained in order to have a complete accounting of all RHB activity and records discovered on
the laptop.
Based on my analysis and overwhelming data confirms Hunter Biden’s MacBook Pro
was not hacked and the data contained on the hard drive is authentic.
Based on the data I examined, there was no manipulation of any photographs, emails,
documents or other user activities.
If I was able to obtain specific information from Cloud, Financial Providers, Cellular
Carriers and other companies identified during my analysis, I would be able to prepare an
affidavit for any requesting party or agency including any related testimony.
FURTHER AFFIANT SAYETH NAUGHT.
Signed this the 20 day of May, 2022.
____________________
Konstantinos “Gus” Dimitrelos
CEO - Cyber Forensics, Inc
Retired - US Secret Service
Appendix 1
Desktop Folder Titled

‘Hunter Burisma Emails’
Name Path Created Accessed Modified
9/1/2020 6:25:55 10/30/2020 11:33:25 9/1/2020 6:25:55

Users/roberthunter/Desktop/Hunter Burisma Emails/Hi, PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Hi, Hunter.eml Hunter.eml 00:25:55 UTC) 17:33:25 UTC) 00:25:55 UTC)
9/1/2020 6:30:26 10/30/2020 11:33:25 9/1/2020 6:30:26

Users/roberthunter/Desktop/Hunter Burisma PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
http___burisma.com.eml Emails/http___burisma.com.eml 00:30:26 UTC) 17:33:25 UTC) 00:30:26 UTC)
9/1/2020 6:42:40 10/30/2020 11:33:25 9/1/2020 6:42:40

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ Potential client 2.eml Potential client 2.eml 00:42:40 UTC) 17:33:25 UTC) 00:42:40 UTC)
9/1/2020 6:42:40 10/30/2020 11:33:25 9/1/2020 6:42:40

Re_ Potential client.eml Potential client.eml 00:42:40 UTC) 17:33:25 UTC) 00:42:40 UTC)
9/1/2020 6:52:25 10/30/2020 11:33:25 9/1/2020 6:52:25

PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
P of P.eml Users/roberthunter/Desktop/Hunter Burisma Emails/P of P.eml 00:52:25 UTC) 17:33:25 UTC) 00:52:25 UTC)
9/1/2020 6:52:25 10/30/2020 11:33:25 9/1/2020 6:52:25

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ P of PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ P of P.eml P.eml 00:52:25 UTC) 17:33:25 UTC) 00:52:25 UTC)
9/1/2020 6:52:25 10/30/2020 11:33:25 9/1/2020 6:52:25

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ P of P PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ P of P 2.eml 2.eml 00:52:25 UTC) 17:33:25 UTC) 00:52:25 UTC)
9/1/2020 6:55:47 10/30/2020 11:33:25 9/1/2020 6:55:47

Users/roberthunter/Desktop/Hunter Burisma Emails/Burisma PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Burisma info.eml info.eml 00:55:47 UTC) 17:33:25 UTC) 00:55:47 UTC)
9/1/2020 6:55:52 10/30/2020 11:33:25 9/1/2020 6:55:52

Burisma info 2.eml info 2.eml 00:55:52 UTC) 17:33:25 UTC) 00:55:52 UTC)
9/1/2020 6:56:53 10/30/2020 11:33:25 9/1/2020 6:56:53

Re_ Burisma 2.eml Burisma 2.eml 00:56:53 UTC) 17:33:25 UTC) 00:56:53 UTC)
9/1/2020 6:56:53 10/30/2020 11:33:25 9/1/2020 6:56:53

Re_ Burisma.eml Burisma.eml 00:56:53 UTC) 17:33:25 UTC) 00:56:53 UTC)
9/1/2020 6:58:12 10/30/2020 11:33:25 9/1/2020 6:58:12

Burisma dates follow-up.eml dates follow-up.eml 00:58:12 UTC) 17:33:25 UTC) 00:58:12 UTC)
9/1/2020 6:58:38 10/30/2020 11:33:25 9/1/2020 6:58:38
Burisma follow-up.eml follow-up.eml 00:58:38 UTC) 17:33:25 UTC) 00:58:38 UTC)
Users/roberthunter/Desktop/Hunter Burisma 9/1/2020 9:34:01 10/30/2020 11:33:25 9/1/2020 9:34:01

NYTimes_ Kiev Struggles to Break Emails/NYTimes_ Kiev Struggles to Break Russia’s Grip on PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Russia’s Grip on Gas Flow.eml Gas Flow.eml 03:34:01 UTC) 17:33:25 UTC) 03:34:01 UTC)
Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ 9/1/2020 9:35:17 10/30/2020 11:33:25 9/1/2020 9:35:17

Re_ NYTimes_ Kiev Struggles to NYTimes_ Kiev Struggles to Break Russia’s Grip on Gas Flow PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Break Russia’s Grip on Gas Flow 2.eml 2.eml 03:35:17 UTC) 17:33:25 UTC) 03:35:17 UTC)

Re_ NYTimes_ Kiev Struggles to NYTimes_ Kiev Struggles to Break Russia’s Grip on Gas PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Break Russia’s Grip on Gas Flow.eml Flow.eml 03:35:17 UTC) 17:33:25 UTC) 03:35:17 UTC)

NYTimes_ Kiev Struggles to Break Emails/NYTimes_ Kiev Struggles to Break Russia’s Grip on PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Russia’s Grip on Gas Flow 2.eml Gas Flow 2.eml 03:35:17 UTC) 17:33:25 UTC) 03:35:17 UTC)
9/1/2020 9:37:51 10/30/2020 11:33:25 9/1/2020 9:37:51

Users/roberthunter/Desktop/Hunter Burisma Emails/Is your PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Is your dad coming here?.eml dad coming here?.eml 03:37:51 UTC) 17:33:25 UTC) 03:37:51 UTC)
9/1/2020 9:37:51 10/30/2020 11:33:25 9/1/2020 9:37:51

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Is PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ Is your dad coming here?.eml your dad coming here?.eml 03:37:51 UTC) 17:33:25 UTC) 03:37:51 UTC)
9/1/2020 9:42:03 10/30/2020 11:33:25 9/1/2020 9:42:03

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ news PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ news update 6 may.eml update 6 may.eml 03:42:03 UTC) 17:33:25 UTC) 03:42:03 UTC)
9/1/2020 9:42:52 10/30/2020 11:33:25 9/1/2020 9:42:52

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ HB PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ HB Burisma press release 6.eml Burisma press release 6.eml 03:42:52 UTC) 17:33:25 UTC) 03:42:52 UTC)
9/1/2020 9:42:52 10/30/2020 11:33:25 9/1/2020 9:42:52

9/1/2020 9:42:52 10/30/2020 11:33:25 9/1/2020 9:42:52

9/1/2020 9:42:52 10/30/2020 11:33:25 9/1/2020 9:42:52

Re_ HB Burisma press release.eml Burisma press release.eml 03:42:52 UTC) 17:33:25 UTC) 03:42:52 UTC)
9/1/2020 9:42:52 10/30/2020 11:33:25 9/1/2020 9:42:52

9/1/2020 9:42:52 10/30/2020 11:33:25 9/1/2020 9:42:52
9/1/2020 9:47:00 10/30/2020 11:33:25 9/1/2020 9:47:00

Re_ Kazahstan visit_ visa issue.eml Kazahstan visit_ visa issue.eml 03:47:00 UTC) 17:33:25 UTC) 03:47:00 UTC)
9/1/2020 9:47:00 10/30/2020 11:33:25 9/1/2020 9:47:00

Users/roberthunter/Desktop/Hunter Burisma Emails/Kazahstan PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Kazahstan visit_ visa issue.eml visit_ visa issue.eml 03:47:00 UTC) 17:33:25 UTC) 03:47:00 UTC)
9/1/2020 9:47:00 10/30/2020 11:33:25 9/1/2020 9:47:00

Re_ Kazahstan visit_ visa issue 2.eml Kazahstan visit_ visa issue 2.eml 03:47:00 UTC) 17:33:25 UTC) 03:47:00 UTC)
9/1/2020 9:48:00 10/30/2020 11:33:25 9/1/2020 9:48:00

9/1/2020 9:48:00 10/30/2020 11:33:25 9/1/2020 9:48:00

9/1/2020 9:48:00 10/30/2020 11:33:25 9/1/2020 9:48:00

Users/roberthunter/Desktop/Hunter Burisma Emails/Kazahstan PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Kazahstan visit_ visa issue 2.eml visit_ visa issue 2.eml 03:48:00 UTC) 17:33:25 UTC) 03:48:00 UTC)
9/1/2020 9:56:29 10/30/2020 11:33:25 9/1/2020 9:56:29

Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ HB PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
RE_ HB Burisma press.eml Burisma press.eml 03:56:29 UTC) 17:33:25 UTC) 03:56:29 UTC)
9/1/2020 9:56:29 10/30/2020 11:33:25 9/1/2020 9:56:29

Users/roberthunter/Desktop/Hunter Burisma Emails/HB PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
HB Burisma press.eml Burisma press.eml 03:56:29 UTC) 17:33:25 UTC) 03:56:29 UTC)
9/1/2020 9:57:43 10/30/2020 11:33:25 9/1/2020 9:57:43

Users/roberthunter/Desktop/Hunter Burisma Emails/Uncle PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Uncle Jack.eml Jack.eml 03:57:43 UTC) 17:33:25 UTC) 03:57:43 UTC)
9/1/2020 9:59:33 10/30/2020 11:33:25 9/1/2020 9:59:33

Looks like a positive media Users/roberthunter/Desktop/Hunter Burisma Emails/Looks like PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
coverage.eml a positive media coverage.eml 03:59:33 UTC) 17:33:25 UTC) 03:59:33 UTC)
9/1/2020 10:01:01 10/30/2020 11:33:25 9/1/2020 10:01:01

Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
RE_ Media reaction to PR on HB 2.eml Media reaction to PR on HB 2.eml 04:01:01 UTC) 17:33:25 UTC) 04:01:01 UTC)
9/1/2020 10:01:01 10/30/2020 11:33:25 9/1/2020 10:01:01

Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
RE_ Media reaction to PR on HB 3.eml Media reaction to PR on HB 3.eml 04:01:01 UTC) 17:33:25 UTC) 04:01:01 UTC)
9/1/2020 10:01:01 10/30/2020 11:33:25 9/1/2020 10:01:01
Re_ Media reaction to PR on HB 4.eml Media reaction to PR on HB 4.eml 04:01:01 UTC) 17:33:25 UTC) 04:01:01 UTC)
9/1/2020 10:01:01 10/30/2020 11:33:25 9/1/2020 10:01:01

Re_ Media reaction to PR on HB.eml Media reaction to PR on HB.eml 04:01:01 UTC) 17:33:25 UTC) 04:01:01 UTC)

Attorney-Client communication_ Emails/Attorney-Client communication_ privileged and PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
privileged and confidential.eml confidential.eml 04:01:45 UTC) 17:33:25 UTC) 04:01:45 UTC)
9/1/2020 10:02:53 10/30/2020 11:33:25 9/1/2020 10:02:53

PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
WSJ.eml Users/roberthunter/Desktop/Hunter Burisma Emails/WSJ.eml 04:02:53 UTC) 17:33:25 UTC) 04:02:53 UTC)
9/1/2020 10:03:19 10/30/2020 11:33:25 9/1/2020 10:03:19

Users/roberthunter/Desktop/Hunter Burisma Emails/WSJ PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
WSJ Article.eml Article.eml 04:03:19 UTC) 17:33:25 UTC) 04:03:19 UTC)
9/1/2020 10:03:40 10/30/2020 11:33:25 9/1/2020 10:03:40

Users/roberthunter/Desktop/Hunter Burisma Emails/AK PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
AK Burisma.eml Burisma.eml 04:03:40 UTC) 17:33:25 UTC) 04:03:40 UTC)
9/1/2020 10:06:19 10/30/2020 11:33:25 9/1/2020 10:06:19

RE_ Email for Board call form Alan Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
2.eml Email for Board call form Alan 2.eml 04:06:19 UTC) 17:33:25 UTC) 04:06:19 UTC)
9/1/2020 10:06:19 10/30/2020 11:33:25 9/1/2020 10:06:19

Re_ Email for Board call form Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Email PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Alan.eml for Board call form Alan.eml 04:06:19 UTC) 17:33:25 UTC) 04:06:19 UTC)
9/1/2020 10:06:19 10/30/2020 11:33:25 9/1/2020 10:06:19

Users/roberthunter/Desktop/Hunter Burisma Emails/Email for PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Email for Board call form Alan.eml Board call form Alan.eml 04:06:19 UTC) 17:33:25 UTC) 04:06:19 UTC)

Re_ Attorney Client Communication_ Attorney Client Communication_ Privileged and PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Privileged and Confidential.eml Confidential.eml 04:07:11 UTC) 17:33:25 UTC) 04:07:11 UTC)
9/1/2020 10:07:11 10/30/2020 11:33:25 9/1/2020 10:07:11

Attorney Client Communication_ Users/roberthunter/Desktop/Hunter Burisma Emails/Attorney PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Privileged and Confidential.eml Client Communication_ Privileged and Confidential.eml 04:07:11 UTC) 17:33:25 UTC) 04:07:11 UTC)
9/1/2020 10:07:29 10/30/2020 11:33:25 9/1/2020 10:07:29

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Has PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ Has Vadim.eml Vadim.eml 04:07:29 UTC) 17:33:25 UTC) 04:07:29 UTC)
9/1/2020 10:08:19 10/30/2020 11:33:25 9/1/2020 10:08:19

Hunter Biden joins Ukraine gas Users/roberthunter/Desktop/Hunter Burisma Emails/Hunter PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
company board - CSMonitor.com.eml Biden joins Ukraine gas company board - CSMonitor.com.eml 04:08:19 UTC) 17:33:25 UTC) 04:08:19 UTC)
9/1/2020 10:10:25 10/30/2020 11:33:25 9/1/2020 10:10:25
Re_ Please give me a call .eml Please give me a call .eml 04:10:25 UTC) 17:33:25 UTC) 04:10:25 UTC)
9/2/2020 8:54:17 10/30/2020 11:33:25 9/2/2020 8:54:17

Users/roberthunter/Desktop/Hunter Burisma Emails/China AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
China WFOE.eml WFOE.eml 14:54:17 UTC) 17:33:25 UTC) 14:54:17 UTC)
9/2/2020 8:57:11 10/30/2020 11:33:25 9/2/2020 8:57:11

Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
RE_ Privileged and Confidential 2.eml Privileged and Confidential 2.eml 14:57:11 UTC) 17:33:25 UTC) 14:57:11 UTC)
9/2/2020 8:57:11 10/30/2020 11:33:25 9/2/2020 8:57:11

Users/roberthunter/Desktop/Hunter Burisma Emails/Privileged AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
Privileged and Confidential.eml and Confidential.eml 14:57:11 UTC) 17:33:25 UTC) 14:57:11 UTC)
9/2/2020 8:57:11 10/30/2020 11:33:25 9/2/2020 8:57:11

Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
RE_ Privileged and Confidential.eml Privileged and Confidential.eml 14:57:11 UTC) 17:33:25 UTC) 14:57:11 UTC)
9/2/2020 9:10:49 10/30/2020 11:33:25 9/2/2020 9:10:49

Users/roberthunter/Desktop/Hunter Burisma Emails/Privileged AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
Privileged and Confidential 2.eml and Confidential 2.eml 15:10:49 UTC) 17:33:25 UTC) 15:10:49 UTC)
9/2/2020 9:42:58 10/30/2020 11:33:25 9/2/2020 9:42:58

Users/roberthunter/Desktop/Hunter Burisma Emails/(No AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
(No Subject).eml Subject).eml 15:42:58 UTC) 17:33:25 UTC) 15:42:58 UTC)
9/2/2020 9:42:58 10/30/2020 11:33:25 9/2/2020 9:42:58

AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
Re_ 2.eml Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ 2.eml 15:42:58 UTC) 17:33:25 UTC) 15:42:58 UTC)
9/2/2020 9:42:58 10/30/2020 11:33:25 9/2/2020 9:42:58

AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
Re_.eml Users/roberthunter/Desktop/Hunter Burisma Emails/Re_.eml 15:42:58 UTC) 17:33:25 UTC) 15:42:58 UTC)
9/2/2020 9:47:46 10/30/2020 11:33:25 9/2/2020 9:47:46

Users/roberthunter/Desktop/Hunter Burisma Emails/Burisma - AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
Burisma - Africa.eml Africa.eml 15:47:46 UTC) 17:33:25 UTC) 15:47:46 UTC)
9/2/2020 9:52:42 10/30/2020 11:33:25 9/2/2020 9:52:42

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Few AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
Re_ Few PR issues.eml PR issues.eml 15:52:42 UTC) 17:33:25 UTC) 15:52:42 UTC)
9/2/2020 9:52:42 10/30/2020 11:33:25 9/2/2020 9:52:42

Users/roberthunter/Desktop/Hunter Burisma Emails/Few PR AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
Few PR issues.eml issues.eml 15:52:42 UTC) 17:33:25 UTC) 15:52:42 UTC)
9/2/2020 10:28:27 10/30/2020 11:33:25 9/2/2020 10:28:27

Privileged and Confidential (visa Users/roberthunter/Desktop/Hunter Burisma Emails/Privileged AM (2020-09-02 AM (2020-10-30 AM (2020-09-02
issue).eml and Confidential (visa issue).eml 16:28:27 UTC) 17:33:25 UTC) 16:28:27 UTC)
Biden’s Son Hunter Discharged From Users/roberthunter/Desktop/Hunter Burisma Emails/Biden’s 9/2/2020 4:17:19 10/30/2020 11:33:25 9/2/2020 4:17:19
Navy Reserve After Failing Cocaine Son Hunter Discharged From Navy Reserve After Failing PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Test - WSJ - WSJ.eml Cocaine Test - WSJ - WSJ.eml 22:17:19 UTC) 17:33:25 UTC) 22:17:19 UTC)
9/2/2020 4:41:02 10/30/2020 11:33:25 9/2/2020 4:41:02

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Call PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ Call me.eml me.eml 22:41:02 UTC) 17:33:25 UTC) 22:41:02 UTC)
9/2/2020 4:41:34 10/30/2020 11:33:25 9/2/2020 4:41:34

Thanks.eml Emails/Thanks.eml 22:41:34 UTC) 17:33:25 UTC) 22:41:34 UTC)
9/2/2020 4:41:34 10/30/2020 11:33:25 9/2/2020 4:41:34

Re_ Thanks.eml Thanks.eml 22:41:34 UTC) 17:33:25 UTC) 22:41:34 UTC)
Re_ unprecedented resolution issued by Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ 9/2/2020 4:45:07 10/30/2020 11:33:25 9/2/2020 4:45:07
the Cabinet of Ministers of Ukraine re unprecedented resolution issued by the Cabinet of Ministers of PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
gas production.eml Ukraine re gas production.eml 22:45:07 UTC) 17:33:25 UTC) 22:45:07 UTC)
9/2/2020 4:55:19 10/30/2020 11:33:25 9/2/2020 4:55:19

Users/roberthunter/Desktop/Hunter Burisma Emails/BoD PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
BoD meeting update.eml meeting update.eml 22:55:19 UTC) 17:33:25 UTC) 22:55:19 UTC)
9/2/2020 5:01:26 10/30/2020 11:33:25 9/2/2020 5:01:26

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Hey PM (2020-09-02 AM (2020-10-30 PM (2020-09-02
Re_ Hey buddy.eml buddy.eml 23:01:26 UTC) 17:33:25 UTC) 23:01:26 UTC)
9/2/2020 6:29:26 10/30/2020 11:33:25 9/2/2020 6:29:26

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Next PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
Re_ Next steps 2.eml steps 2.eml 00:29:26 UTC) 17:33:25 UTC) 00:29:26 UTC)
9/2/2020 6:29:26 10/30/2020 11:33:25 9/2/2020 6:29:26

9/2/2020 6:29:26 10/30/2020 11:33:25 9/2/2020 6:29:26

9/2/2020 6:29:26 10/30/2020 11:33:25 9/2/2020 6:29:26

9/2/2020 6:29:26 10/30/2020 11:33:25 9/2/2020 6:29:26

9/2/2020 6:29:26 10/30/2020 11:33:25 9/2/2020 6:29:26

Re_ Next steps.eml steps.eml 00:29:26 UTC) 17:33:25 UTC) 00:29:26 UTC)
9/2/2020 7:00:49 10/30/2020 11:33:25 9/2/2020 7:00:49
Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Re PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
Re_ Re Mexico trip.eml Mexico trip.eml 01:00:49 UTC) 17:33:25 UTC) 01:00:49 UTC)
9/2/2020 7:00:49 10/30/2020 11:33:25 9/2/2020 7:00:49

Re_ Re Mexico trip 4.eml Mexico trip 4.eml 01:00:49 UTC) 17:33:25 UTC) 01:00:49 UTC)
9/2/2020 7:00:49 10/30/2020 11:33:25 9/2/2020 7:00:49

Users/roberthunter/Desktop/Hunter Burisma Emails/Re PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
Re Mexico trip.eml Mexico trip.eml 01:00:49 UTC) 17:33:25 UTC) 01:00:49 UTC)
9/2/2020 7:00:49 10/30/2020 11:33:25 9/2/2020 7:00:49

9/2/2020 7:00:49 10/30/2020 11:33:25 9/2/2020 7:00:49

9/2/2020 7:00:49 10/30/2020 11:33:25 9/2/2020 7:00:49

9/3/2020 8:06:40 10/30/2020 11:33:25 9/3/2020 8:06:40

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Guest AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Re_ Guest list for 16th.eml list for 16th.eml 14:06:40 UTC) 17:33:25 UTC) 14:06:40 UTC)
9/3/2020 8:06:40 10/30/2020 11:33:25 9/3/2020 8:06:40

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ Guest AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Re_ Guest list for 16th 2.eml list for 16th 2.eml 14:06:40 UTC) 17:33:25 UTC) 14:06:40 UTC)
9/3/2020 8:18:23 10/30/2020 11:33:25 9/3/2020 8:18:23

Burisma named Ukraine's Best natural Users/roberthunter/Desktop/Hunter Burisma Emails/Burisma AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
gas Producer.eml named Ukraine's Best natural gas Producer.eml 14:18:23 UTC) 17:33:25 UTC) 14:18:23 UTC)
9/3/2020 8:28:43 10/30/2020 11:33:25 9/3/2020 8:28:43

Users/roberthunter/Desktop/Hunter Burisma Emails/Meeting AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Meeting for coffee?.eml for coffee?.eml 14:28:43 UTC) 17:33:25 UTC) 14:28:43 UTC)
9/3/2020 8:36:38 10/30/2020 11:33:25 9/3/2020 8:36:38

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Re_ geothermal piece reminder.eml geothermal piece reminder.eml 14:36:38 UTC) 17:33:25 UTC) 14:36:38 UTC)
9/3/2020 9:26:53 10/30/2020 11:33:25 9/3/2020 9:26:53

Users/roberthunter/Desktop/Hunter Burisma Emails/Oil AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Oil deal.eml deal.eml 15:26:53 UTC) 17:33:25 UTC) 15:26:53 UTC)
9/3/2020 9:33:43 10/30/2020 11:33:25 9/3/2020 9:33:43

Users/roberthunter/Desktop/Hunter Burisma Emails/My AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
My resignation.eml resignation.eml 15:33:43 UTC) 17:33:25 UTC) 15:33:43 UTC)
9/3/2020 9:49:50 10/30/2020 11:33:25 9/3/2020 9:49:50
Users/roberthunter/Desktop/Hunter Burisma Emails/Phone AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Phone numbers.eml numbers.eml 15:49:50 UTC) 17:33:25 UTC) 15:49:50 UTC)
9/3/2020 10:02:19 10/30/2020 11:33:25 9/3/2020 10:02:19

Users/roberthunter/Desktop/Hunter Burisma Emails/fishing AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
fishing trip.eml trip.eml 16:02:19 UTC) 17:33:25 UTC) 16:02:19 UTC)
9/3/2020 10:02:19 10/30/2020 11:33:25 9/3/2020 10:02:19

Re_ fishing trip.eml fishing trip.eml 16:02:19 UTC) 17:33:25 UTC) 16:02:19 UTC)
9/3/2020 10:02:19 10/30/2020 11:33:25 9/3/2020 10:02:19

Re_ fishing trip 2.eml fishing trip 2.eml 16:02:19 UTC) 17:33:25 UTC) 16:02:19 UTC)
9/3/2020 10:04:56 10/30/2020 11:33:25 9/3/2020 10:04:56

Re_ framed Cyprus BoD meeting photo Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
delivery.eml framed Cyprus BoD meeting photo delivery.eml 16:04:56 UTC) 17:33:25 UTC) 16:04:56 UTC)
9/3/2020 10:04:56 10/30/2020 11:33:25 9/3/2020 10:04:56

framed Cyprus BoD meeting photo Users/roberthunter/Desktop/Hunter Burisma Emails/framed AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
delivery.eml Cyprus BoD meeting photo delivery.eml 16:04:56 UTC) 17:33:25 UTC) 16:04:56 UTC)
9/3/2020 10:07:16 10/30/2020 11:33:25 9/3/2020 10:07:16

Users/roberthunter/Desktop/Hunter Burisma Emails/(No AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
(No Subject) 2.eml Subject) 2.eml 16:07:16 UTC) 17:33:25 UTC) 16:07:16 UTC)
9/3/2020 10:38:08 10/30/2020 11:33:25 9/3/2020 10:38:08

Re_ Greetings.eml Greetings.eml 16:38:08 UTC) 17:33:25 UTC) 16:38:08 UTC)
9/3/2020 10:38:08 10/30/2020 11:33:25 9/3/2020 10:38:08

Users/roberthunter/Desktop/Hunter Burisma AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Greetings.eml Emails/Greetings.eml 16:38:08 UTC) 17:33:25 UTC) 16:38:08 UTC)
9/3/2020 11:14:17 10/30/2020 11:33:25 9/3/2020 11:14:17

Users/roberthunter/Desktop/Hunter Burisma AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Norway.eml Emails/Norway.eml 17:14:17 UTC) 17:33:25 UTC) 17:14:17 UTC)
9/3/2020 11:39:19 10/30/2020 11:33:25 9/3/2020 11:39:19

Re_ Children passport scan copies.eml Children passport scan copies.eml 17:39:19 UTC) 17:33:25 UTC) 17:39:19 UTC)
9/3/2020 11:42:42 10/30/2020 11:33:25 9/3/2020 11:42:42

Re_ norway update.eml norway update.eml 17:42:42 UTC) 17:33:25 UTC) 17:42:42 UTC)
9/3/2020 11:42:42 10/30/2020 11:33:25 9/3/2020 11:42:42

Users/roberthunter/Desktop/Hunter Burisma Emails/norway AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
norway update.eml update.eml 17:42:42 UTC) 17:33:25 UTC) 17:42:42 UTC)
9/3/2020 11:44:53 10/30/2020 11:33:25 9/3/2020 11:44:53
Re_ Vacation to China.eml Vacation to China.eml 17:44:53 UTC) 17:33:25 UTC) 17:44:53 UTC)
9/3/2020 11:44:53 10/30/2020 11:33:25 9/3/2020 11:44:53

Users/roberthunter/Desktop/Hunter Burisma Emails/Vacation AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Vacation to China.eml to China.eml 17:44:53 UTC) 17:33:25 UTC) 17:44:53 UTC)
9/3/2020 11:54:43 10/30/2020 11:33:25 9/3/2020 11:54:43

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ China AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Re_ China trip.eml trip.eml 17:54:43 UTC) 17:33:25 UTC) 17:54:43 UTC)
9/3/2020 11:54:43 10/30/2020 11:33:25 9/3/2020 11:54:43

Users/roberthunter/Desktop/Hunter Burisma Emails/Re_ China AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
Re_ China trip 2.eml trip 2.eml 17:54:43 UTC) 17:33:25 UTC) 17:54:43 UTC)
9/3/2020 11:54:43 10/30/2020 11:33:25 9/3/2020 11:54:43

Users/roberthunter/Desktop/Hunter Burisma Emails/China AM (2020-09-03 AM (2020-10-30 AM (2020-09-03
China trip.eml trip.eml 17:54:43 UTC) 17:33:25 UTC) 17:54:43 UTC)
9/3/2020 12:36:06 10/30/2020 11:33:25 9/3/2020 12:36:06

Users/roberthunter/Desktop/Hunter Burisma Emails/GRC PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
GRC materials & Travel details.eml materials & Travel details.eml 18:36:06 UTC) 17:33:25 UTC) 18:36:06 UTC)
9/3/2020 12:39:34 10/30/2020 11:33:25 9/3/2020 12:39:34

Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ RHB PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
RE_ RHB insurance card.pdf 3.eml insurance card.pdf 3.eml 18:39:34 UTC) 17:33:25 UTC) 18:39:34 UTC)
9/3/2020 12:39:34 10/30/2020 11:33:25 9/3/2020 12:39:34

9/3/2020 12:39:34 10/30/2020 11:33:25 9/3/2020 12:39:34

9/3/2020 12:39:34 10/30/2020 11:33:25 9/3/2020 12:39:34

RE_ RHB insurance card.pdf.eml insurance card.pdf.eml 18:39:34 UTC) 17:33:25 UTC) 18:39:34 UTC)
9/3/2020 12:58:29 10/30/2020 11:33:25 9/3/2020 12:58:29

Ukraine.eml Emails/Ukraine.eml 18:58:29 UTC) 17:33:25 UTC) 18:58:29 UTC)
9/3/2020 1:13:55 10/30/2020 11:33:25 9/3/2020 1:13:55

Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ Mtg PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
RE_ Mtg w_ Guttman.eml w_ Guttman.eml 19:13:55 UTC) 17:33:25 UTC) 19:13:55 UTC)
9/3/2020 1:50:29 10/30/2020 11:33:25 9/3/2020 1:50:29

http___burisma.com 2.eml Emails/http___burisma.com 2.eml 19:50:29 UTC) 17:33:25 UTC) 19:50:29 UTC)
9/3/2020 2:01:56 10/30/2020 11:33:25 9/3/2020 2:01:56
Interesting.eml Emails/Interesting.eml 20:01:56 UTC) 17:33:25 UTC) 20:01:56 UTC)
9/3/2020 2:06:30 10/30/2020 11:33:25 9/3/2020 2:06:30

Users/roberthunter/Desktop/Hunter Burisma Emails/Tax PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
Tax returns.eml returns.eml 20:06:30 UTC) 17:33:25 UTC) 20:06:30 UTC)
9/3/2020 2:08:11 10/30/2020 11:33:25 9/3/2020 2:08:11

Users/roberthunter/Desktop/Hunter Burisma Emails/RE_ ACH PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
RE_ ACH etc.eml etc.eml 20:08:11 UTC) 17:33:25 UTC) 20:08:11 UTC)
9/3/2020 2:09:53 10/30/2020 11:33:25 9/3/2020 2:09:53

Re_ Please respond.eml Please respond.eml 20:09:53 UTC) 17:33:25 UTC) 20:09:53 UTC)
9/3/2020 2:11:34 10/30/2020 11:33:25 9/3/2020 2:11:34

PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
9/3/2020 2:11:34 10/30/2020 11:33:25 9/3/2020 2:11:34

PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
9/3/2020 2:11:58 10/30/2020 11:33:25 9/3/2020 2:11:58

Users/roberthunter/Desktop/Hunter Burisma Emails/Updated PM (2020-09-03 AM (2020-10-30 PM (2020-09-03
Updated List of Bills.eml List of Bills.eml 20:11:58 UTC) 17:33:25 UTC) 20:11:58 UTC)

Final Hunter Biden Laptop Report Redacted

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Final Hunter Biden Laptop Report Redacted

Uploaded by

Copyright:

Available Formats

1.

Cyber Forensics Request Background

Apple MacBook Pro Laptop Hard Drive

Path Modified Accessed Created

/root/Users/roberthunter/Desktop/DESKTOP 12/9/2017 4:50:46 PM 10/28/2020 12:47:02 AM 12/9/2017 4:50:46 PM

/root/Users/roberthunter/Library/Mail/V6/1670BB73-9EB5-4000-83C4-3CB2E76EB29F/[Gmail].mbox/All 2/9/2019 11:19:05 PM (2019-02-10

Make - Apple Model - iPhone 6

53. There are numerous

Robert’s MacBook Pro 10-22-2018 23:45:43 FVFXC2MMHV29 73.61.117.110

0487e5e533ff336c1e8ff8dc8da8a42319f71659 RHBs iPhone 5K03725VA4T 2011-11-06T04:38:08Z

251a4dceb39bdb2b219a4002a7cae0e4ab591f24 iPad DN6GPY1ZDFJ3 2012-01-23T21:11:31Z

1378449e0c7cab40300d5cc1b093efaeb083d7ba iPad DKVHH197DFJ3 2012-04-28T01:07:24Z

05c943f603a064de956737b814082515839d553f RHB's iPhone F17JF7R8F38W 2012-10-03T22:25:42Z

c7d80b03f9cd759133deb1ae5a815067ce0b108e Robert's iPad F4KK251QF195 2013-02-19T19:27:06Z

74dab6ccfe8f6d06a7185324eed9630f8cb91c38 iPhone DQGK20AHF38W 2013-03-19T16:35:23Z

1040F38BF67A Mac C02210201H1DY4WAK 2014-06-16T16:06:29Z

44813bb5ea8e84f23075018a22b62a2ddf2c8268 RHBs iPhone DNPNF7B8G5MK 2014-09-26T20:26:38Z

3294a119cb42ede7d640789e8e689a22d1bcd9de iPad F4LN71E2G5V4 2015-02-02T18:44:38Z

5d360c8344de193a85fbf5d0e1b4e76866108ce0 iPhone F78NVR47G5MK 2015-03-06T19:27:12Z

375ae95961706c69aa636ac283a112321182e401 Roberts iPad DLXQL4EUGMLD 2015-11-11T20:06:53Z

c37631799309010b8f5967a9ef419499b9a9931a Robert's iPhone C7JNW76QG5MG 2016-09-06T01:30:36Z

147ebb6cbdf62a2ac9fd4adc4969da1eb05b25dd iPad Pro 206 DMPR876AH1MD 2016-09-11T21:54:52Z

03dd15937a2d4ef20a486a6a38365efc86a4d74a iPhone DQGKK080FH1G 2016-09-18T09:31:01Z

eab4455a0c78f4035088f9c3456db6a41e9a2bc9 HHB4 F17RX8XEHFLM 2016-09-22T00:00:19Z

74c22abd15086602b28a4bcde4dc2c2c16e1a64c rhb7 C76SFH8MHG7Q 2016-10-09T15:55:54Z

aec544c1f8103404a0cdcef24dae75d9e6810145 Henrys iPhone DX3SMDXKFF9R 2016-11-22T00:19:54Z

995372fbb6a44f1fb94647f36fabcdcc285868e0 iPhone17 F71SXG61HG71 2017-01-24T03:14:00Z

C4B301A1D720 Mac C026342008JGTQMAH 2017-02-02T15:30:31Z

784F438F7989 Mac C02708606RBHCH81Q 2017-04-19T09:15:28Z

51c968b35c496aa74b060cad95b3aa62d5d34249 iPhone F71SN6HTHG7D 2017-05-27T07:19:55Z

0D14A9D130C1031AE7C50064DE7B4D7C6370BEA6 Apple TV C07TCUVJG9RM 2017-08-17T04:40:24Z

950992368b3cf7d89e73fd47525e3f61d5309716 Roberts iPad GCTV1234HLJK 2017-08-24T07:37:41Z

945d55fec6a12427421ce87aabcdfbd50915ea54 Roberts iPhone C6KTX7UDHG7F 2017-08-24T23:58:59Z

1408ED3DB02D88B38B126618BF61B64EF71D401E Apple TV DY3SYVEXG9RM 2017-09-02T08:40:50Z

5cab7a41cde5cd78852c421c7c20aa8aa2ed137f iPhone17 F17V48ZEHX96 2017-09-15T19:34:50Z

459575edef9a9133df4d32f3a8f303909591b515 iPhone F17JLC5QF8H5 2017-09-19T15:49:55Z

1cacea75db2f0b5b536bc009de708a94a8e61ea0 iPhone DX3TPQJ9HTVK 2017-09-19T17:00:13Z

e9b8b678772ce7231eef1b0e65b0cb7803ce7026 iPhone C8PV80V4JC6L 2017-10-11T22:58:01Z

ef250c098dd8acba05043e28bda322f3458f4119 iPhone F17TG76MHX97 2017-10-20T18:57:51Z

d16834d9ff972e72e61e5c6a273e03f7bd169ccc iPhone F2LVGYBDJCLQ 2017-10-20T22:57:07Z

e5b482862d55bb2ecacc4f274cb1c296687d0948 Roberts iPad GCGVC60MHLJJ 2017-10-21T08:17:50Z

9cd536d8d78f3185b225c58b81608ad91d8d8a20 iPhone C7CVK1YBJC6C 2017-11-17T22:37:49Z

4c341212b6044b8928f95ad75ea7dfb19793fb8e Robert Hunters iPhone F2MVHVNGJCLY 2017-11-19T10:31:34Z

8C859026117A Bobbys MacBook Pro C02730301ELHRQT1Q 2018-01-08T09:13:06Z

646183d6850d909bc12f57c3c8c69cbc4edb1de1 iPhone F18VT93MJCL8 2018-01-21T00:59:47Z

fe68b801301a9696b19c0debb806930015563dd7 iPhone F18VT7UFJCL8 2018-01-21T01:12:09Z

47be0a706190ea262634e63c6ac986eb0f2ce918 Roberts iPad DMPV94KNHLJJ 2018-01-21T01:29:35Z

8C859026117A Bobbys MacBook Pro C02730301ELHRQT1Q 2018-01-22T18:11:11Z

88E9FE51EAE4 Roberts MacBook C028164016YHJ9V1Y 2018-05-29T06:49:41Z

88E9FE51EAE4 Roberts MacBook C028164016YHJ9V1Y 2018-08-03T06:46:44Z

F018981BAD27 Bobby's MacBook Pro C02830506M3JH4T17 2018-09-01T17:35:54Z

F018981BAD27 Bobby's MacBook Pro C02830506M3JH4T17 2018-09-02T11:26:37Z

d6500a6040c532d1df4722e2d6fe3df32f5b42f2 Robert Hunters iPhone F2LX5D3XJWLM 2018-09-20T06:39:29Z

cf545b458408223feb99184b402d127eb001e382 HB rediPhone FD4X75MNJCLY 2018-10-14T01:30:26Z

c0dc2f0847805f2112645809ac1dc7a8fcfcfa53 iPhone G6TX2F20JCL8 2018-10-14T18:28:55Z

F018980E7C2C Roberts MacBook Pro FVFXC2MMHV29 2018-11-15T10:43:18Z

Financial Transactions and Business Involvement Verifications

Email Header Summary:

RHB’s Apple iPhone X

65. In another chat conversation with a person named Azur H. RBH

HUDSON WEST III LLC - DE - Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox/...Messages/73360.partial.emlx/HUDSON WEST III LLC - DE

Hudson West letter.pdf Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox/...Messages/54254.partial.emlx/Hudson West letter.pdf

Hudson West 01152018.pdf Users/roberthunter/Library/Mail/.../[Gmail].mbox/All Mail.mbox.../Messages/66069.partial.emlx/Hudson West 01152018.pdf