Many Windows users have noticed a strange behavior: after creating a new file, its properties show a creation date from the previous day or even earlier. Microsoft confirms this is not a bug but the result of File System Tunneling, a feature the operating system has used for decades.
When a file is deleted or renamed, Windows briefly stores its metadata in a special cache. If another file with the same name is created in the same folder within roughly 15 seconds, the new file inherits the original creation date and the mapping between long and short filenames. The actual content of the deleted file is not recovered.
The mechanism serves two main purposes. First, many applications save documents safely by writing changes to a temporary file, deleting the original, and then renaming the temporary file to the original name. Without tunneling, Windows would treat the document as brand new each time and update its creation date.
Second, the feature maintains compatibility with programs from the DOS and 16-bit eras that relied on the classic 8.3 filename format. Tunneling preserves the link between short and long names during rapid file operations.
The tunneling cache is temporary and gradually cleared, so a file deleted weeks or months earlier will not transfer its date to a new file with the same name. The behavior only triggers under specific combinations of delete, create, and rename actions within one folder.
