timestamp is more likely the modification time instead of the access time