iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Windows can give a replacement file the creation date of a recently deleted or renamed file with the same name because of a compatibility feature called file-system tunneling. It preserves selected filename metadata briefly; it does not restore the deleted file or its contents.
What Windows file-system tunneling does
In its driver documentation, Microsoft describes a per-volume cache that can briefly preserve a removed file’s name information and creation time. When a matching name is added, Windows can use the cached information for the new directory entry. The behavior applies to NTFS and FAT in the documented context, and the cache is effective per directory instance; deleting a directory removes its cache. Microsoft’s FltGetTunneledName reference describes the cache and the operations involved.
In practical terms, the file entry can be new while its displayed creation date is inherited from a recently removed or renamed entry. Tunneling preserves metadata, not data: it does not bring back the old file’s contents.
Why an application might trigger it
Replacing a file while saving
Some applications save changes by writing the updated contents to a temporary file, deleting or moving aside the original, and renaming the temporary file to the original name. That sequence can make a save look like a replacement to the file system. Tunneling can preserve the earlier creation time so the operation still appears to the user as editing the existing file rather than creating an unrelated one.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
Microsoft engineer Raymond Chen explains this compatibility rationale in The Old New Thing: users expect an edited file to retain its creation timestamp even when an application implements the save by replacing it.
Keeping long and short filenames associated
Windows also supports legacy 8.3 short filenames alongside long filenames. Tunneling can preserve the relationship between those names through a rename or replacement, helping older programs that rely on that association. Chen discusses both this filename compatibility and the save behavior in his explanation.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
Which file operations can be involved?
Microsoft’s driver reference lists these operation pairs as capable of tunneling a name:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Delete a name, then create a file with that name.
- Delete a name, then rename another file to that name.
- Rename a file to a different name, then create a file using its former name.
- Rename a file to a different name, then rename another file to its former name.
The documented effect concerns create, hard-link, and rename operations—not ordinary reads or writes. Seeing an old creation date after a replacement is therefore consistent with tunneling, but the date alone cannot prove exactly which sequence occurred.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
How long does the preserved metadata last?
Windows Latest reported a 15-second default window in a September 21, 2026 article, attributing that figure to a legacy Microsoft Knowledge Base article. However, Microsoft’s current driver reference describes the cache as brief without giving a duration. Treat 15 seconds as a reported default, not a verified guarantee for every currently supported Windows version or configuration.
Check which timestamp you are looking at
Windows exposes several file times. Creation time is distinct from last-write time, which records when file contents were last changed, and last-access time. An old Created value does not by itself mean a file’s contents are old or unchanged.
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
There is also a filesystem and time-zone distinction. Microsoft defines a file time as a 64-bit count of 100-nanosecond intervals since January 1, 1601 UTC. NTFS stores file times in UTC, while FAT stores them based on the local computer’s time. Conversion and display can therefore affect how a timestamp appears. See Microsoft’s File Times documentation when interpreting exact values.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →What to do if a replacement file has an unexpected Created date
- Consider whether the application saves by replacing the original, or whether a file with the same name was recently deleted or renamed in that directory.
- Compare Created with Modified and other relevant timestamps rather than treating one field as a record of the file’s contents.
- If you need to investigate exact times, identify the filesystem and account for UTC versus local-time handling.
For developers, Microsoft’s .NET CreationTime documentation notes that API objects may cache creation-time values and that NTFS tunneling can affect replacement behavior; it says an application may need to set creation time explicitly when overwriting or replacing a file. That is implementation guidance, not a general recommendation for users to edit timestamps.
Quick Recap
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
