4nsics Tools

Analyze ExFAT

Enter Text:

(paste or type all 512 bytes with either all spaces OR with no spaces e.g. 00 11 22 33... OR 00112233 to get the right answer. Don't enter the hex notation [0x]. A mix of spaces and no spaces will not work.)

Offset: Hex [Dec]	Length in Bytes	Description
ExFAT - Boot Record (Volume Boot Record)
0x00 [0]	3	Jump instructions (0xEB/0x76/0x90)
0x03 [3]	8	FileSystem Name ("EXFAT" in this case)
0x0B [11]	25	Zeroes (BIOS Parameter Block of the FileSystem)
0x24 [36]	27	Zeroes (Also a Placeholder)
0x40 [64]	8	Partition Offset from the Start of the Physical Drive
0x48 [72]	8	Size of the exFAT volume (No of sectors in this volume)
0x50 [80]	4	FAT sector offset from the top of the volume (in Sectors)
0x54 [80]	4	Total Number of Sectors
0x58 [88]	4	Cluster Bitmap Offset from top of the volume in Sectors.
0x5C [92]	4	No of Clusters in the Volume
0x60 [96]	4	First Cluster No of the Root Directory
0x64 [100]	4	Volume Serial Number
0x68 [104]	2	Version of the FileSytem
0x6A [106]	2	Volume Flags
0x6C [108]	1	Bytes per Sector in Log2 (Power of 2)
0x6D [109]	1	Sectors per Cluster in Log2 (Power of 2)
0x6E [110]	1	No of File Allocation Tables (1 indicates ONE FAT and ONE Allocation Bitmap. 2 indicates TWO of FAT and Allocation Bitmap)
0x6F [111]	1	Drive No. used by BIOS
0x70 [112]	1	Volume used in Percentage. If value is 0xFF, it is not used
0x71 [113]	7	Reserved
0x78 [120]	390	Boot Code
0x1FE [510]	2	Boot Signature

Calculate Date and Time

Analyze ExFAT

ExFAT - Boot Record (Volume Boot Record)