Unallocated file date accuracy (TSK)

Good morning!

I'm working on my project and I found a file that is a solid indicator of compromise. Filename is a hash, it shows as an application/octet-stream and has path c:/Users/$user/AppData/Local/Packages/Microsoft.Windows\[...\]. In other words, it does not say orphan.

The date shown on Autopsy for created, accessed, changed,and modified show as the same (sometime in the spring).

How confident can I be about this date? If it's correct, it would signal that the system compromise goes back to the …

computerforensics