Process Monitor is showing impossibly old Timestamps for modules under \Windows\SysWOW64

Windows User 11 Reputation points
2021-03-26T06:14:46.097+00:00

When viewing process modules, I have noticed that many modules under C:\Window\SysWOW64 have impossibly old Timestamps, yet if you view the properties of a modules, they appear normal. I observed this on my test VM and also a customer's computer who sent me a PML to examine. ![81793-2021-03-25-230110.jpg][1] [1]: /api/attachments/81793-2021-03-25-230110.jpg?platform=QnA

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,198 questions
{count} votes

2 answers

Sort by: Most helpful
  1. MetalAnon 0 Reputation points
    2025-02-06T19:12:04.77+00:00

    Same explorer old file dates

    what gives?

    0 comments No comments

  2. RLWA32 47,031 Reputation points
    2025-02-06T20:12:43.1633333+00:00

    A good discussion of bizarre timestamps can be found at Why are the module timestamps in Windows 10 so nonsensical?.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.