Page 1 of 1

Windows Shutdown Time

Posted: Fri Jan 24, 2020 5:16 am
by rwiper
The Windows registry records when the system was last closed down in the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows

under the ShutdownTime value. The shutdown value is stored using a binary value; to decode it to a readable form.