03-19-2012 05:58 AM
Modified date is the timestamp that the bitstream of the file was last modified. On NTFS this doesn't apply only to that instance / copy of the file. But the source of the copy, and the source of that copy...all have the same Last modified time stamp. When file copy occur on NTFS, the original's modified time stamp is a part of the file's meta data that gets copied to the destination.
Creation date is the date that file instance was created.
03-19-2012 06:20 AM - edited 03-19-2012 06:21 AM
The file date is not necessary the creation date, but rather the date that the file was copied to the system. Regardless, the file is left over from the preload process at the factory just like the C:\mfg folder and the C:\Intel folder. The preload process at the factory is not one gigantic image, but rather a set of individual modules that are assembled into the preload.
03-19-2012 08:39 AM - edited 03-19-2012 08:40 AM
I confirmed that that folder and file is installed by the preload process. The purpose of the file has to do with setting up fingerprint during Lenovo Welcome (the app that runs the very first time a customer turns on the computer).
I have no idea why someone decided to put it in c:\root when there are already other folders for purposes like that, such as c:\mfg and c:\swtools. Forum users can safely delete that folder. It serves no purpose other than setting up the system during first run.
A bit sloppy on Lenovo's part, but there's nothing malicious here.