Skip to content

Class: WindowsPESection

"A Windows PE section is a grouping of characteristics unique to a specific default or custom-defined region of a Windows PE (Portable Executable) file, consisting of an individual portion of the actual executable content of the file delineated according to unique purpose and memory protection requirements."

URI: master:WindowsPESection

classDiagram class WindowsPESection UcoInherentCharacterizationThing <|-- WindowsPESection WindowsPESection : entropy WindowsPESection : hashes WindowsPESection ..> Hash : hashes WindowsPESection : name WindowsPESection : size

Inheritance

Slots

Name Cardinality and Range Description Inheritance
hashes 0..1
Hash
"Specifies any hashes computed over the section direct
entropy 0..1
DecimalType
"Shannon entropy (a measure of randomness) of the data direct
size 0..1
PositiveInteger
The number of item belonging to a collection direct
name 0..1
String
The name of a particular concept characterization direct

Usages

used by used in type used
WindowsPEBinaryFileFacet sections range WindowsPESection

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/uco-master

Mappings

Mapping Type Mapped Value
self master:WindowsPESection
native master:WindowsPESection

LinkML Source

Direct

name: WindowsPESection
description: '"A Windows PE section is a grouping of characteristics unique to a specific
  default or custom-defined region of a Windows PE (Portable Executable) file, consisting
  of an individual portion of the actual executable content of the file delineated
  according to unique purpose and memory protection requirements."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-master
rank: 1000
is_a: UcoInherentCharacterizationThing
slots:
- hashes
- entropy
- size
- name
slot_usage:
  hashes:
    name: hashes
    multivalued: true
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection

Induced

name: WindowsPESection
description: '"A Windows PE section is a grouping of characteristics unique to a specific
  default or custom-defined region of a Windows PE (Portable Executable) file, consisting
  of an individual portion of the actual executable content of the file delineated
  according to unique purpose and memory protection requirements."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-master
rank: 1000
is_a: UcoInherentCharacterizationThing
slot_usage:
  hashes:
    name: hashes
    multivalued: true
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection
attributes:
  hashes:
    name: hashes
    description: '"Specifies any hashes computed over the section."'
    from_schema: https://w3id.org/lmodel/uco-master
    rank: 1000
    multivalued: true
    alias: hashes
    owner: WindowsPESection
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection
    range: Hash
  entropy:
    name: entropy
    description: '"Shannon entropy (a measure of randomness) of the data."'
    from_schema: https://w3id.org/lmodel/uco-master
    exact_mappings:
    - wikidata:Q4205093
    rank: 1000
    alias: entropy
    owner: WindowsPESection
    domain_of:
    - ContentDataFacet
    - WindowsPESection
    range: decimal type
  size:
    name: size
    description: The number of item belonging to a collection.
    comments:
    - CO defines the size of a collection as the sum of the number of times entities
      that are part of the collection appear in it. This means that co:size considers
      how much each entity is involved by a particular collection, i.e.
    - the size of the set {a, b, c} is three
    - the size of the bag [a, a, b, b, b, c] is five
    - the size of the list (a, b, c, b, a, b, c, c) is seven</dc:description>
    from_schema: https://w3id.org/lmodel/uco-master
    aliases:
    - has size
    exact_mappings:
    - co:size
    rank: 1000
    domain: Collection
    alias: size
    owner: WindowsPESection
    domain_of:
    - Collection
    - AlternateDataStreamFacet
    - WindowsPESection
    range: positive integer
  name:
    name: name
    description: The name of a particular concept characterization.
    comments:
    - This annotation is typically used to describe an artifact such as a controlled
      vocabulary, document, ontology, or other similar resource.
    from_schema: https://w3id.org/lmodel/uco-master
    aliases:
    - label
    - display name
    - title
    - alt label
    exact_mappings:
    - CSO:named_entity
    - gr:name
    - lm_core:name
    - om:name
    - REPR:name
    - schema:name
    broad_mappings:
    - CSO:named_entity
    rank: 1000
    slot_uri: rdfs:label
    alias: name
    owner: WindowsPESection
    domain_of:
    - UcoObject
    - AlternateDataStreamFacet
    - EnvironmentVariable
    - OnlineServiceFacet
    - ProfileFacet
    - WindowsPESection
    - WindowsRegistryValue
    range: string