file creation/modification dates are extremely easy to modify ex post facto. several tools to do this. it’s one of the techniques viruses use to cover their tracks, namely clever viruses don’t let you find suspicious files based on creation/modification dates relative to when you know the virus first appeared.
Would the changes leave a trail?