eidenk, on Sep 11 2007, 08:13 PM, said:
Thanks, I ignored that. Let us hope it is more reliable with MS files than with Exe Explorer itself, as I would not think it has been compiled the 19/06/1992.
Great catch, eidenk!

The people at MiTeC, of course, may have done it as a deliberate prank...
It hadn't occurred to me to use it to look for its own PE Timestamp. It can be spoofed quite easily. The only reason I think that it's usually reliable is the fact that it is a very little known detail of the PE standard, automatically set by the linker. One has to know it's there to spoof it.

PEDUMP, for instance, really is from 29/08/2001, and I just found out a newer version of it (05/4/2004) in the downlodable
companion file to this
MSDN article, by Matt Pietrek: interestingly enough, when you run the 2001 version it says 1988 on the sign-on message, while the 2004 version says 2001. Matt Pietrek has updated that program many times, but did not update the text of the sign-on message consistenly every time... This new version still cannot find the dates of the dependencies but has improved, for, at least, it abstains from translating 00000000 as Wed Dec 31 22:00:00 1969...