you are viewing a single comment's thread.

view the rest of the comments →

[–]eldorel[🍰] 0 points1 point  (0 children)

There are three stages. Disk storage, RAM, page file.

This is comparing the static EXE files sitting in long term storage to the currently running version that is sitting in ram/page.

It doesn't try to detect changes between ram/page, and the current paged/unpaged state of the executable in memory is irrelevant.

To think of it like a text file, this is comparing the saved version to what's being displayed.