question

WindowsUser-8752 avatar image
0 Votes"
WindowsUser-8752 asked

Process Monitor is showing impossibly old Timestamps for modules under \Windows\SysWOW64

When viewing process modules, I have noticed that many modules under C:\Window\SysWOW64 have impossibly old Timestamps, yet if you view the properties of a modules, they appear normal. I observed this on my test VM and also a customer's computer who sent me a PML to examine. ![81793-2021-03-25-230110.jpg][1] [1]: /answers/storage/attachments/81793-2021-03-25-230110.jpg

windows-sysinternals-procmon
2021-03-25-230110.jpg (364.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

0 Answers