REPORT ON THE DATA FOUND ON EXHIBIT TW4

Evidence Number "TW4 02" Alias "TW4 02"

File "G.\500 03\TW4 -TERRYITW4 02 .E01"was acquired by Terry Williams at 21/07/03 03:17 15PM
The computer system clock read : 21/07/03 03 17 15PM.

Evidence acquired under Windows 2000 using version 3 22g

Acquisition Notes :
Compact Disk labelled "PDT MAY 2003 - RESTRICTED" .

File Integrity :
Completely Verified, 0 Errors.
Acquisition Hash E5E7DED068E6C252C3D27EA6051 EEE21
Verification Hash E5E7DED068E6C252C3D27EA6051 EEE21

Drive Geometry:
Total Size 1 .OGB (542,004 sectors)

Volume "TW4_02" Parameters

File System: IS09660 Drive Type : CD-ROM
Sectors Per Cluster 1 Bytes Per Sector: 2,048
Total Sectors : 542,004 Total Capacity. 1,110,024,192 bytes
(1 OGB)
Total Clusters: 542,004 Unallocated : 836,493,312 bytes
(797.7MB)
Free Clusters 408,444 Allocated 273,530,880 bytes
(260.9MB)
Volume Name Volume Offset 0
 REPORT ON THE DATA FOUND ON EXHIBIT TW4
Evidence Number "TW4 Ol" Alias "TW4 01"

File "G \500 03\TW4 - TERRY\TW4 01 .E01" was acquired by Terry Williams at 21/07/03 03:38 :41 PM.
The computer system clock read 21/07/03 03:39 22PM.

Evidence acquired under Windows 2000 using version 3.22g

Acquisition Notes:
3 5" floppy disk labelled "Lotus 123 credit card"

File Integrity :
Completely Verified, 0 Errors
Acquisition Hash, 5C27F97BEAF4B303E530547A2CED41F8
Verification Hash: 5C27F97BEAF4B303E530547A2CED41F8

Drive Geometry:
Total Size 1 4MB (2,880 sectors)

" Volume "TW4 01" Parameters

File System FAT12 Drive Type : Removable
Sectors Per Cluster, 1 Bytes PerSector 512
Total Sectors, 2,880 Total Capacity 1,457,664 bytes (1 4MB)
Total Clusters 2,847 Unallocated, 325,120 bytes (317 .5KB)
Free Clusters, 635 Allocated : 1,132,544 bytes (1 1 MB)
Volume Name NO NAME Volume Offset: 0
OEM Version IBM 6.0 Volume Serial * 3505-18E3
Heads : 2 Sectors Per Track 18
Unused Sectors 0 Number of FATs 2
Sectors Per FAT 9 Boot Sectors 1
This email below was found on the hard ddve it had been deleted. The text in blue is
the information that is data used by the internet and the computer the text in bold red
is the message text. The location on the hard drive where the message was found
tighter with the file attributes are shown below in italics.

Full Path
Last Wntten 17/07/03 10 :37:30AM
Last Accessed 17107103

X400-Recipients
Date-, Thu, 17 Jul 2003 9:28.24 +0100

Message-Id : yV

From : CPAC-DD
To:
Subject : PQs
MIME-Version, 1 0 (Generated by NET-TEL X.400 Rfcgate Version 5 2 1)
Content-Type: MultipartlMixed,

Content-Type: tex p ai~t=us-ascii

Content-Transfer-Encoding: 7bit

The information contained in this e-mail is private and is solely for the use of
the intended recipient(s) .

If you are not the intended recipient, you have no legal right to use the
contents of this e-mail .

The views expressed in this e-mail do not necessarily reflect Government

(Defence) policy .

David

more PQs=21 But plenty of time for reply. I expect that Bryan will deal t=
omorrow.

James

Ccntent-type :application/octet-stream ;name=1742 (2) doc

Content-Disposition. attachment,filename="1742 (2).doc",size=21504
Content-Transfer-Encoding: base64