In article <>,
says...
>
> What does it mean when the dates of creation, modification and access of a
> file are in reverse order?
File creation is time when a file was created as a filesystem item,
e.g. record in MFT.
File modification is time when a file content was created/modified.
Therefore, if you e.g. copy file from another disk,
or extracting it from an archive,
creation is when you did so,
but modification keeps original value.
Access time is normally always equal or newer.
In fact I never see the opposite.
But, it need not to be.
Some accesses intentionally do not modify
access dates. More exactly, are returning previus value back.
By access affected access time is often taken an access,
binded to to ways of how the file is use.
E.g. when Antivirus software is performing
a disk wide AV scan on demand,
a well behaving AV do not modify access times.
--
Poutnik
The best depends on how the best is defined.