Jerry Wayne Remines v. Commonwealth of Virginia

• Court: Court of Appeals of Virginia
• Decided: December 20, 2022
• Docket: 0737212
• Status: Unpublished

Opinion

COURT OF APPEALS OF VIRGINIA UNPUBLISHED

Present: Chief Judge Decker, Judges AtLee and Malveaux Argued at Richmond, Virginia

JERRY WAYNE REMINES MEMORANDUM OPINION* BY v. Record No. 0737-21-2 JUDGE RICHARD Y. ATLEE, JR. DECEMBER 20, 2022 COMMONWEALTH OF VIRGINIA

FROM THE CIRCUIT COURT OF HALIFAX COUNTY Kimberley S. White, Judge1

David B. Hargett (Hargett Law, PLC, on brief), for appellant.

Timothy J. Huffstutter, Assistant Attorney General (Jason S. Miyares, Attorney General, on brief), for appellee.

Following a bench trial, the circuit court convicted appellant Jerry Wayne Remines of one

count of possession of child pornography and ten counts of possession of child pornography, second

or subsequent offense, all occurring between August 24, 2019, through October 12, 2019.2 On

appeal, he argues “[t]he evidence was insufficient on each count as to knowingly possessing the

illegal files and/or exercising dominion and control over said files.” For the following reasons,

we affirm.

* Pursuant to Code § 17.1-413, this opinion is not designated for publication. 1 The Honorable Kimberley S. White presided over the proceedings below. Now a member of this Court, Judge White took no part in this decision. 2 Remines also pled guilty to making an unauthorized copy of computer software (computer trespass). This conviction is not challenged on appeal. I. BACKGROUND

“On appeal of criminal convictions, we view the facts in the light most favorable to the

Commonwealth, and [we] draw all reasonable inferences from those facts.” Johnson v.

Commonwealth, 73 Va. App. 393, 396 (2021) (alteration in original) (quoting Payne v.

Commonwealth, 65 Va. App. 194, 198 (2015)). So viewed, the facts reflect the following.

Remines operated an electronics repair business, Airborne Electronics Repair, out of his

home. In the fall of 2019, South Boston Police Department Corporal Adam Whitmore brought his

phone to Remines to fix a broken screen. Remines said the screen was not repairable, and

Whitmore purchased a new phone. When Whitmore downloaded his cloud data to his new phone,

he saw several text messages sent from his phone number to a number associated with Airborne

Electronics Repair. These messages were sent after Whitmore had dropped his phone off for repair

with Remines, without Whitmore’s permission or knowledge, and included photographs of

Whitmore’s wife in “states of undress” and an intimate video of Whitmore and his wife. Whitmore

brought this information to the Department’s attention, and South Boston Police Department

Detective Tiffany Bratton obtained a search warrant for Remines’s cell phone and “any computer

hardware or software that is capable of data storage and handling.”

When the police executed the search warrant at Remines’s home, Remines came to the door

holding his cell phone, an iPhone 8 Plus. Bratton took the phone and gave it to Special Agent

Travis Barr of the Virginia State Police, who secured the device. Bratton proceeded to interview

Remines, who denied taking images from Whitmore’s phone but said he may have backed up the

phone’s contents. He stated he used his own cell phone for both personal and business purposes.

He refused to provide his passcode to unlock the phone, claiming there was “confidential

information inside the phone.”

-2- Barr testified at trial as an expert in digital examination and analysis. Upon receiving

Remines’s phone, Barr put it in “airplane mode” and changed the settings so it would not go to

sleep. He immediately noticed a TOR browser, which permits a user to browse the “dark web.” He

transported the phone, along with other recovered devices, to a secure location for analysis. Barr

connected the phone to “GreyKey,” which permits law enforcement to collect data from a locked

device. The resulting zip file, containing the phone’s contents, can then be indexed and analyzed by

other programs. While searching for Whitmore’s photos, Barr came across child pornography. He

also noted a browser bookmark for “young lolita lesbians.”

Barr provided the devices and extracted material to Special Agent James Trogdon of the

Virginia State Police’s computer evidence recovery section, who also testified at trial as an expert in

digital forensic examination and analysis.3 Trogdon noted several things that connected Remines to

the device: the phone’s device display name was registered as “Airborne Electronics Repair,” and

there were multiple emails using “masstech” and “phonerepair22@gmail.com,” with the email

contact name being “Jerry R.”

Trogdon’s analysis found that “the bulk of” the child pornography was from three different

applications (“apps”): MEWE (a social networking app), VK (a Russian social networking app),

and Mega (a cloud storage provider). The MEWE app indicated that Remines accessed it with

the username “tlbytes” or “littletlbytes.” Cached photos associated with the MEWE app

included images of Remines and his wife, Remines in military uniform, a race car with a

“Airborne Electronics Repair” decal on the bumper, and Remines’s family tree.

3 Remines called his own expert witness in digital forensic analysis, Patrick Eller. To the limited extent this testimony is meaningfully inconsistent with that of the Commonwealth’s expert, we “‘discard the evidence of the accused in conflict with that of the Commonwealth[ ] and regard as true all the credible evidence favorable to the Commonwealth and all fair inferences to be drawn’ from that evidence.” Johnson, 73 Va. App. at 398 (alteration in original) (quoting Haba v. Commonwealth, 73 Va. App. 277, 283 (2021)). -3- The MEWE app data also included group memberships and chat history regarding the

searching for and dissemination of child pornography. Remines was the

moderator/administrator—meaning he could approve or deny new members or ban existing

members—of one of these groups. It had a series of “yes or no” questions a user must answer in

order to join, each of which the “tlbytes” user responded to in the affirmative. These questions

included:

• Do you agree to post content whether forbidden or just plain sexy taboo content so that everyone in the group can enjoy it[?] • [T]o ensure that the group . . . hangs around for a while, do you agree to put any underage or extreme porn content on timers[?] • [B]y joining the group, do you agree not to report any content [of] this group no matter what . . . pics, gif[s], videos, links or comments [are] posted . . . [?] • [I]f you choose to join this group, you are admitting that you are a sick, perverted fuck that enjoys filling the void of his/her life with the most devious porn known to the internet. Agree[?]

The chat history for the MEWE app “tlbytes” account included messages sent to another

user about finding and joining groups. These messages included: “What the fuck wrong with

these morons they can insert a fucking three inch diameter wine bottle up a pussy and ass but go

crazy about the word incest”; “Are there any incest groups on here?”; and “Feel free to add me to

any of your taboo or young groups.”

The VK app cache data contained five images depicting child pornography. These

images were downloaded on November 29, 2018, September 7, 2019, and November 18, 2019.

The VK app had been downloaded by the user of the phonerepair22@gmail.com email address.

The Mega app cache contained the “majority of” the child pornography. The Mega app

provides cloud storage, allowing a user to store their files for future access and to create links to

share with others. Trogdon identified 919 media files, and at least 96 images, depicting child

pornography in the Mega app data. The images were in a “thumbnailsV3” folder, which

Trogdon explained would only occur if a user clicked on the image. All but one file indicated a -4- “created date,” which Trogdon described as the “date in which that artifact was created on the

device,” between August 24, 2019, and October 12, 2019.4 The app data also contained a video

depicting child pornography with a created date of October 8, 2019. Trogdon testified that “[i]n

order for the video file to arrive in the temporary location, it would have had to have been clicked

and played through the Mega application.”

The phone data also indicated that Remines used a virtual private network, or VPN, when

accessing these apps and images. This would disguise Remines’s actual IP address and location in

South Boston, and display IP addresses in other locations (such as Guadalajara, Mexico), providing

additional anonymity and privacy protection.

Remines moved to strike at the close of the evidence, arguing that the evidence was

insufficient to prove that he knowingly possessed or exercised dominion or control over the files. In

denying Remines’s motion, and prior to convicting Remines, the circuit court determined that

“clicking and viewing an image of child pornography is exercising dominion and control over that

image. When you click it, you can save it, you can send it, you can print it, you can delete it, you

can do any number of things with that—with that image.” It noted that the Commonwealth had

established that Remines intentionally “repeated[ly] access[ed] exceedingly graphic and violent

child pornography.”

The circuit court ultimately found Remines guilty. It found Trogdon’s expert testimony

credible and determined that, because “images do not land in that cache unless they’ve been clicked

and opened,” Remines intended to view these images. It noted that Remines had repeatedly denied

ever viewing child pornography, even accidentally. The circuit court also emphasized that Remines

“answered the MEWE app questions that clearly are meant to weed out those people who would be

disturbed or apt to report” the child pornography distributed in that group. Furthermore, it noted

4 One “outlier” file had a “created date” of July 31, 2015. -5- Remines’s chat evidence and his bookmark to a “young lolita site.” Accordingly, the circuit court

convicted Remines of one count of possession of child pornography, and ten counts of possession of

child pornography, second or subsequent offense. He received a sentence of 55 years and 12

months, with 35 years and 12 months suspended. This appeal follows.

II. ANALYSIS

Remines presents two primary arguments. First, he claims that under this Court’s precedent,

the lack of forensic tools providing Remines with access to the cached images at the time of the

device’s seizure meant the evidence was insufficient to prove that he knowingly possessed the

images. Second, he argues that Code § 18.2-374.1:1,5 which criminalizes “knowingly possess[ing]

child pornography,” does not include the “mere viewing” of images in the scope of “possession.”

Both arguments fail under existing precedent.

A. Standard of Review

“We apply a deferential standard of review to challenges based on the sufficiency of the

evidence, and the decision of ‘[t]he lower court will be reversed only if that court’s judgment is

plainly wrong or without evidence to support it.’” Otey v. Commonwealth, 71 Va. App. 792, 797

(2020) (alteration in original) (quoting Cartagena v. Commonwealth, 68 Va. App. 202, 207 (2017)).

“[T]he relevant question is, upon review of the evidence in the light most favorable to the

prosecution, whether any rational trier of fact could have found the essential elements of the crime

beyond a reasonable doubt.” Id. (quoting Smith v. Commonwealth, 296 Va. 450, 460 (2018)).

B. Lack of Forensic Tools and Knowing Possession

Remines points to Kobman v. Commonwealth, 65 Va. App. 304 (2015), for the principle

that the lack of specialized knowledge or forensic tools meant that he could not access the

Remines cites “Code § 8.01-374.1:1” on brief, but it is clear from the context that he 5

means Code § 18.2-374.1:1. -6- images obtained from the cache, and thus could not have possessed the images. He ignores one

key distinction, however, which the circuit court noted in pronouncing him guilty: the defendant

in Kobman (and subsequently in Kovach v. Commonwealth, No. 2013-15-2 (Va. Ct. App. Dec. 6,

2016), which Remines also relies upon) was indicted for possession of the images on the date the

search warrant was executed. Therefore, in Kobman, the lack of evidence that the defendant

could access the cached images, i.e., the absence of specialized knowledge or forensic software,

on the date provided in the indictment was critical in finding the evidence insufficient. Here, the

indictments were for possession of child pornography between August 24, 2019, and October 12,

2019,6 which encompasses the “created date” of each of the images for which Remines was

convicted. Expert testimony established that the “created date” reflected the time which the

image was clicked, viewed, or accessed on Remines’s cell phone. Accordingly, because the

cached pornographic files in question were all accessed between August 24, 2019, and October

12, 2019, the evidence is sufficient to show that Remines possessed the images on those dates set

forth in the indictments. Additional proof that he used or had specialized knowledge or forensic

tools to access cached files at a later point is unnecessary.

C. Viewing or Clicking on Images as Possession

In Kromer v. Commonwealth, 45 Va. App. 812 (2005), this Court adopted the stance that

“each time [an individual] intentionally sought out and viewed child pornography with his Web

browser[,] he knowingly acquired and possessed the images.” 45 Va. App. at 817 (quoting

United States v. Tucker, 305 F.3d 1193, 1205 (10th Cir. 2002)). This Court specifically noted:

“While the facts in Tucker differ from the facts here, we adopt the court’s definition of

6 The original indictments referenced the dates “September 1, 2019 through November 20, 2019,” but were subsequently amended. -7- possession of computer images.” Id. (emphasis added). This previous holding is dispositive

here.7

There is overwhelming evidence that Remines “intentionally sought out” child

pornography, as well as viewed it, not only from the recovered cached files, but also from his

browser bookmarks, app chat history, and group memberships. Remines does not contest that he

possessed and had control over his phone, nor does he offer any theory that some other user

might have been responsible for any activity on the phone. Moreover, the presence of Remines’s

name, email address, and personal images in these app user profiles and app data further link

Remines to the recovered files and phone activity.

Remines’s phone contained data from apps that contained hundreds of images depicting

graphic child pornography. Five of those images were in the app data for the VK app, indicating

the images were accessed on November 29, 2018, September 7, 2019, and November 18, 2019.

Hundreds of additional images were in the app data for the Mega app, indicating they had been

created, or actively interacted with by clicking on or enlarging them, by Remines, between

August 24, 2019, and October 12, 2019. A video depicting child pornography on the Mega app

was viewed on October 8, 2019.

Crucially, the evidence was not limited to the recovered cached media files. Remines’s

phone contained records indicating he actively sought out underage content, including belonging

to groups dedicated to sharing it. He even facilitated its distribution through his role as a group

moderator, to which membership required sharing “forbidden or just plain sexy taboo content”

and “underage or extreme porn.” It was also forbidden to report images or activity within the

7 Remines cites precedent from other jurisdictions, and he notes that the federal system amended the child pornography statute to provide that it is illegal for any person who either “knowingly possesses” or “knowingly accesses with intent to view” any “material that contains an image of child pornography.” 18 U.S.C. § 2252A. While Code § 18.2-374.1:1 does not contain such an amendment, it is not necessary in light of Kromer. -8- group, and joining required agreeing that the user is a “sick, perverted fuck that enjoys filling the

void of his/her life with the most devious porn known to the internet.” Remines’s chat history

also showed that he sought to be added to more groups that shared “taboo or young” content and

expressed interest in “incest” content. He even expressed dismay that others who were fine with

images depicting “insert[ing] a fucking three inch diameter wine bottle up a pussy and ass”

would “go crazy about the word incest.” Remines never claimed to have accidentally accessed

or clicked on these illegal images, despite having the opportunity to do so. He also concealed his

activities by accessing these apps via a VPN.

Our case law is clear that any time someone intentionally seeks out and views child

pornography on the internet, that person knowingly acquires and possesses the images. Kromer,

45 Va. App. at 817. The evidence here is overwhelming that Remines sought out and viewed

child pornography and that the images recovered from his phone’s cached data were there due to

his interaction with that content. Accordingly, the circuit court did not err in finding him guilty

of possession of child pornography.

III. CONCLUSION

The evidence was sufficient to show that Remines knowingly possessed child

pornography when he intentionally sought it out and accessed it. We find no error in the circuit

court’s decision and, therefore, affirm.

Affirmed.

-9-