Windows Shutdown Time

A place to discuss data and privacy protection, file and disk wipe, computer cleaning, and removing traces of user activity with R-Wipe & Clean.
Forum rules
Discussion on the R-Wipe & Clean and R-Crypto software
rwiper

Windows Shutdown Time

Post by rwiper » Fri Jan 24, 2020 5:16 am

The Windows registry records when the system was last closed down in the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows

under the ShutdownTime value. The shutdown value is stored using a binary value; to decode it to a readable form.