what properties carried over to metadata2.docx from metadata1.docx, even though the content of the file was erased? why did this happen? could a computer forensics specialist use this technique to examine metadata, even if the contents of the document were deleted?
