I was working a case a while back and I came across some malware that had time stomping capabilities. There have been numerous posts written on how to use the MFT as a means to determine if time stomping has occurred, so I won't go into too much detail here.
more here.......http://az4n6.blogspot.com/2014/10/timestomp-mft-shenanigans.html
more here.......http://az4n6.blogspot.com/2014/10/timestomp-mft-shenanigans.html