Discussion in 'other security issues & news' started by AKAJohnDoe, May 2, 2009.
How is this possible? And the size!
Perhaps it was copied out of dllcache on April 28th and perhaps it's compressed?
Like this one - except size difference is a different reason:
Another reason may be the system clock was not set properly when the document was created which may account for the illusion. Either that or it was magic!
To illustrate: here is a file (compressed) in ../dllcache.
I copy the file to another location and the created date changes but the modified date stays the same.
I don't think that the information provided in that article is completely correct. In my dllcache directory, most of the files have 1999 as both created and modified, meaning, I think, that 1999 was the date that the installer was set up with all of the directories/files. So, the file was created in the installer directory on that date. Here is an example:
The 2003.12.06 created date in the first screenshot was when I installed Win2K. I think SP4 updated some of these dlls, hence, the later created date.
The created date of my dllcache directory is 2003.12.06.
So, I have two created dates for files in that directory, both technically correct, yet a bit misleading.
Separate names with a comma.