Is this something that can happen or do you think that the site has been hacked.
Computers do not make decisions and alter/update/modify anything on their own unless to is called for in code

So, some one changed/replaced the file causing a new modifired date

As to a hack - - do you have ALL the security patcheds installed?
Were you ever hacked - and maybe did not clean your files completely?