Class: WindowsPESection
"A Windows PE section is a grouping of characteristics unique to a specific default or custom-defined region of a Windows PE (Portable Executable) file, consisting of an individual portion of the actual executable content of the file delineated according to unique purpose and memory protection requirements."
classDiagram
class WindowsPESection
UcoInherentCharacterizationThing <|-- WindowsPESection
WindowsPESection : entropy
WindowsPESection : hashes
WindowsPESection ..> Hash : hashes
WindowsPESection : name
WindowsPESection : size
Inheritance
- UcoThing
- UcoInherentCharacterizationThing
- WindowsPESection
- UcoInherentCharacterizationThing
Slots
Name | Cardinality and Range | Description | Inheritance |
---|---|---|---|
hashes | 0..1 Hash |
"Specifies any hashes computed over the section | direct |
entropy | 0..1 DecimalType |
"Shannon entropy (a measure of randomness) of the data | direct |
size | 0..1 PositiveInteger |
The number of item belonging to a collection | direct |
name | 0..1 String |
The name of a particular concept characterization | direct |
Usages
used by | used in | type | used |
---|---|---|---|
WindowsPEBinaryFileFacet | sections | range | WindowsPESection |
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/uco-master
Mappings
Mapping Type | Mapped Value |
---|---|
self | master:WindowsPESection |
native | master:WindowsPESection |
LinkML Source
Direct
name: WindowsPESection
description: '"A Windows PE section is a grouping of characteristics unique to a specific
default or custom-defined region of a Windows PE (Portable Executable) file, consisting
of an individual portion of the actual executable content of the file delineated
according to unique purpose and memory protection requirements."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-master
rank: 1000
is_a: UcoInherentCharacterizationThing
slots:
- hashes
- entropy
- size
- name
slot_usage:
hashes:
name: hashes
multivalued: true
domain_of:
- AlternateDataStreamFacet
- WindowsPESection
Induced
name: WindowsPESection
description: '"A Windows PE section is a grouping of characteristics unique to a specific
default or custom-defined region of a Windows PE (Portable Executable) file, consisting
of an individual portion of the actual executable content of the file delineated
according to unique purpose and memory protection requirements."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-master
rank: 1000
is_a: UcoInherentCharacterizationThing
slot_usage:
hashes:
name: hashes
multivalued: true
domain_of:
- AlternateDataStreamFacet
- WindowsPESection
attributes:
hashes:
name: hashes
description: '"Specifies any hashes computed over the section."'
from_schema: https://w3id.org/lmodel/uco-master
rank: 1000
multivalued: true
alias: hashes
owner: WindowsPESection
domain_of:
- AlternateDataStreamFacet
- WindowsPESection
range: Hash
entropy:
name: entropy
description: '"Shannon entropy (a measure of randomness) of the data."'
from_schema: https://w3id.org/lmodel/uco-master
exact_mappings:
- wikidata:Q4205093
rank: 1000
alias: entropy
owner: WindowsPESection
domain_of:
- ContentDataFacet
- WindowsPESection
range: decimal type
size:
name: size
description: The number of item belonging to a collection.
comments:
- CO defines the size of a collection as the sum of the number of times entities
that are part of the collection appear in it. This means that co:size considers
how much each entity is involved by a particular collection, i.e.
- the size of the set {a, b, c} is three
- the size of the bag [a, a, b, b, b, c] is five
- the size of the list (a, b, c, b, a, b, c, c) is seven</dc:description>
from_schema: https://w3id.org/lmodel/uco-master
aliases:
- has size
exact_mappings:
- co:size
rank: 1000
domain: Collection
alias: size
owner: WindowsPESection
domain_of:
- Collection
- AlternateDataStreamFacet
- WindowsPESection
range: positive integer
name:
name: name
description: The name of a particular concept characterization.
comments:
- This annotation is typically used to describe an artifact such as a controlled
vocabulary, document, ontology, or other similar resource.
from_schema: https://w3id.org/lmodel/uco-master
aliases:
- label
- display name
- title
- alt label
exact_mappings:
- CSO:named_entity
- gr:name
- lm_core:name
- om:name
- REPR:name
- schema:name
broad_mappings:
- CSO:named_entity
rank: 1000
slot_uri: rdfs:label
alias: name
owner: WindowsPESection
domain_of:
- UcoObject
- AlternateDataStreamFacet
- EnvironmentVariable
- OnlineServiceFacet
- ProfileFacet
- WindowsPESection
- WindowsRegistryValue
range: string