Comment by mmsc

  what makes this file such an interesting find, though, is that the shell has been present since at least december 2011

It's really easy to change the creation date of a file by changing the system clock for a millisecond, and create a file, before changing the clock back to normal. Some people like to do this to avoid their back doors being found by IR doing a "find" for any newly created files.