Difference between revisions of "Windows Job File Format"

From ForensicsWiki
Jump to: navigation, search
(Created page with "{{expand}} == Overview == On Windows a .JOB file specifies task configuration. A .JOB file consists of two main sections, fixed-length and variable-length. === fixed-len...")
 
(fixed-length section)
Line 27: Line 27:
 
| 16
 
| 16
 
|
 
|
| Job uuid
+
| Job UUID (or GUID)
 
|-
 
|-
 
| 20
 
| 20
 
| 2
 
| 2
 
|
 
|
| App Name Len Offset
+
| Application name size offset <br> The offset is relative from the start of the file.
 
|-
 
|-
 
| 22
 
| 22
 
| 2
 
| 2
 
|
 
|
| Trigger Offset
+
| Trigger offset <br> The offset is relative from the start of the file.
 
|-
 
|-
 
| 24
 
| 24
Line 122: Line 122:
 
| 2
 
| 2
 
|
 
|
| MilliSeconds
+
| Milli second
 
|}
 
|}
  

Revision as of 11:30, 5 July 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Overview

On Windows a .JOB file specifies task configuration. A .JOB file consists of two main sections, fixed-length and variable-length.

fixed-length section

The fixed-length section is 68 bytes in size and consists of:

offset size value description
0 2 Product version
2 2 File version
4 16 Job UUID (or GUID)
20 2 Application name size offset
The offset is relative from the start of the file.
22 2 Trigger offset
The offset is relative from the start of the file.
24 2 Error Retry Count
26 2 Error Retry Interval
28 2 Idle Deadline
30 2 Idle Wait
32 4 Priority
36 4 Maximum Run Time
40 4 Exit Code
44 4 Status
48 4 Flags
52 2 Year
54 2 Month
56 2 Weekday
58 2 Day
60 2 Hour
62 2 Minute
64 2 Second
66 2 Milli second

variable-length section

See Also

External Links