Home > Products > Windows Passwords > Reset Windows Password > Screenshots > Boot status explorer
Boot status parser and viewer
05.06.2023
Reset Windows Password v13.1
Forensic tools to analyze Remote Desktop activity in Windows
10.05.2023
Wireless Password Recovery v6.8.1
New templates to seach for default passwords of some broadband WiFi routers
24.04.2023
Reset Windows Password v13.0
Full support for Windows 11, duplicate file finder, checksum calculator and some new tools
06.04.2023
Office password recovery tools
Support for some new GPU devices

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Reset Windows Password: boot status explorer


The boot status explorer is a tool that monitors the boot process and detects any problems that may occur during startup. By analyzing the bootstat.dat file, the tool can extract information related to the boot process stored by Windows Boot Manager, such as the previous boot sequence, the last successful boot, and any previous failed attempts.

This tool is particularly useful when trying to identify the cause of boot failures, such as unexpected shutdowns or crashes. If Windows fails to start up properly, the Boot status explorer can help pinpoint the problem and provide guidance on how to resolve it.

 

Selecting the bootstat.dat file

Selecting bootstat.dat location

The bootstat.dat file can be found either in the Windows directory or the EFI boot partition, which is typically hidden in Windows. If any hidden partitions are detected, the program will prompt the user to scan them for the bootstat.dat file.


 

View boot status

Boot status viewer

The boot status log consists of event records. Every record describes an event related to the boot process in Windows and contains the following fields:

  • Time stamp - BIOS time (in seconds) from the beginning of the day. In Windows 10 and higher OSes this value may be cropped
  • Application - GUID of the source application.
  • Type - record type. For example, error, warning, or information.
  • Event - event ID. Some event IDs are unknown.
  • Extended info - additional information about event.