When viewing process modules, I have noticed that many modules under C:\Window\SysWOW64 have impossibly old Timestamps, yet if you view the properties of a modules, they appear normal. I observed this on my test VM and also a customer's computer who sent me a PML to examine. ![81793-2021-03-25-230110.jpg][1] [1]: /answers/storage/attachments/81793-2021-03-25-230110.jpg