ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Windows Job File Format"

From ForensicsWiki
Jump to: navigation, search
(Created page with "{{expand}} == Overview == On Windows a .JOB file specifies task configuration. A .JOB file consists of two main sections, fixed-length and variable-length. === fixed-len...")
 
(fixed-length section)
Line 27: Line 27:
 
| 16
 
| 16
 
|
 
|
| Job uuid
+
| Job UUID (or GUID)
 
|-
 
|-
 
| 20
 
| 20
 
| 2
 
| 2
 
|
 
|
| App Name Len Offset
+
| Application name size offset <br> The offset is relative from the start of the file.
 
|-
 
|-
 
| 22
 
| 22
 
| 2
 
| 2
 
|
 
|
| Trigger Offset
+
| Trigger offset <br> The offset is relative from the start of the file.
 
|-
 
|-
 
| 24
 
| 24
Line 122: Line 122:
 
| 2
 
| 2
 
|
 
|
| MilliSeconds
+
| Milli second
 
|}
 
|}
  

Revision as of 15:30, 5 July 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Overview

On Windows a .JOB file specifies task configuration. A .JOB file consists of two main sections, fixed-length and variable-length.

fixed-length section

The fixed-length section is 68 bytes in size and consists of:

offset size value description
0 2 Product version
2 2 File version
4 16 Job UUID (or GUID)
20 2 Application name size offset
The offset is relative from the start of the file.
22 2 Trigger offset
The offset is relative from the start of the file.
24 2 Error Retry Count
26 2 Error Retry Interval
28 2 Idle Deadline
30 2 Idle Wait
32 4 Priority
36 4 Maximum Run Time
40 4 Exit Code
44 4 Status
48 4 Flags
52 2 Year
54 2 Month
56 2 Weekday
58 2 Day
60 2 Hour
62 2 Minute
64 2 Second
66 2 Milli second

variable-length section

See Also

External Links