Class: WindowsPESection

name: WindowsPESection
description: '"A Windows PE section is a grouping of characteristics unique to a specific
  default or custom-defined region of a Windows PE (Portable Executable) file, consisting
  of an individual portion of the actual executable content of the file delineated
  according to unique purpose and memory protection requirements."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: UcoInherentCharacterizationThing
slots:
- hashes
- entropy
- size
- name
slot_usage:
  hashes:
    name: hashes
    multivalued: true
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection

name: WindowsPESection
description: '"A Windows PE section is a grouping of characteristics unique to a specific
  default or custom-defined region of a Windows PE (Portable Executable) file, consisting
  of an individual portion of the actual executable content of the file delineated
  according to unique purpose and memory protection requirements."'
in_subset:
- microsoft
from_schema: https://w3id.org/lmodel/uco-observable
rank: 1000
is_a: UcoInherentCharacterizationThing
slot_usage:
  hashes:
    name: hashes
    multivalued: true
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection
attributes:
  hashes:
    name: hashes
    description: '"Specifies any hashes computed over the section."'
    from_schema: https://w3id.org/lmodel/uco-observable
    rank: 1000
    multivalued: true
    alias: hashes
    owner: WindowsPESection
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection
    range: Hash
  entropy:
    name: entropy
    description: '"Shannon entropy (a measure of randomness) of the data."'
    from_schema: https://w3id.org/lmodel/uco-observable
    exact_mappings:
    - wikidata:Q4205093
    rank: 1000
    alias: entropy
    owner: WindowsPESection
    domain_of:
    - ContentDataFacet
    - WindowsPESection
    range: decimal type
  size:
    name: size
    description: The number of item belonging to a collection.
    comments:
    - CO defines the size of a collection as the sum of the number of times entities
      that are part of the collection appear in it. This means that co:size considers
      how much each entity is involved by a particular collection, i.e.
    - the size of the set {a, b, c} is three
    - the size of the bag [a, a, b, b, b, c] is five
    - the size of the list (a, b, c, b, a, b, c, c) is seven</dc:description>
    from_schema: https://w3id.org/lmodel/collections
    aliases:
    - has size
    exact_mappings:
    - co:size
    domain: Collection
    alias: size
    owner: WindowsPESection
    domain_of:
    - AlternateDataStreamFacet
    - WindowsPESection
    - Collection
    range: positive integer
  name:
    name: name
    description: The name of a particular concept characterization.
    comments:
    - This annotation is typically used to describe an artifact such as a controlled
      vocabulary, document, ontology, or other similar resource.
    from_schema: https://w3id.org/lmodel/uco-core
    aliases:
    - label
    - display name
    - title
    - alt label
    exact_mappings:
    - CSO:named_entity
    - gr:name
    - lm_core:name
    - om:name
    - REPR:name
    - schema:name
    broad_mappings:
    - CSO:named_entity
    slot_uri: rdfs:label
    alias: name
    owner: WindowsPESection
    domain_of:
    - AlternateDataStreamFacet
    - EnvironmentVariable
    - OnlineServiceFacet
    - ProfileFacet
    - WindowsPESection
    - WindowsRegistryValue
    - UcoObject
    range: string