Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,198 questions
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
When viewing process modules, I have noticed that many modules under C:\Window\SysWOW64 have impossibly old Timestamps, yet if you view the properties of a modules, they appear normal. I observed this on my test VM and also a customer's computer who sent me a PML to examine. ![81793-2021-03-25-230110.jpg][1] [1]: /api/attachments/81793-2021-03-25-230110.jpg?platform=QnA
A good discussion of bizarre timestamps can be found at Why are the module timestamps in Windows 10 so nonsensical?.