https://unifiedcyberontology.org/ontology/uco/observable#WindowsPEOptionalHeader
Instances of observable:WindowsPEOptionalHeader can have the following properties:
PROPERTY | TYPE | DESCRIPTION | RANGE |
---|---|---|---|
From class observable:WindowsPEOptionalHeader | |||
observable:addressOfEntryPoint | owl:DatatypeProperty | Specifies the address of the entry point relative to the image base when the executable is loaded into memory. | xs:unsignedInt |
observable:baseOfCode | owl:DatatypeProperty | Specifies the address that is relative to the image base of the beginning-of-code section when it is loaded into memory. | xs:unsignedInt |
observable:checksum | owl:DatatypeProperty | Specifies the checksum of the PE binary. | xs:unsignedInt |
observable:dllCharacteristics | owl:DatatypeProperty | Specifies the flags that characterize the PE binary. | xs:unsignedShort |
observable:fileAlignment | owl:DatatypeProperty | Specifies the factor (in bytes) that is used to align the raw data of sections in the image file. | xs:unsignedInt |
observable:imageBase | owl:DatatypeProperty | Specifies the address that is relative to the image base of the beginning-of-data section when it is loaded into memory. | xs:unsignedInt |
observable:loaderFlags | owl:DatatypeProperty | Specifies the reserved loader flags | xs:unsignedInt |
observable:magic | owl:DatatypeProperty | Specifies the value that indicates the type of the PE binary. | xs:unsignedShort |
observable:majorImageVersion | owl:DatatypeProperty | Specifies the major version number of the image. | xs:unsignedShort |
observable:majorLinkerVersion | owl:DatatypeProperty | Specifies the linker major version number. | xs:byte |
observable:majorOSVersion | owl:DatatypeProperty | Specifies the major version number of the required operating system. | xs:unsignedShort |
observable:majorSubsystemVersion | owl:DatatypeProperty | Specifies the major version number of the subsystem. | xs:unsignedShort |
observable:minorImageVersion | owl:DatatypeProperty | Specifies the minor version number of the image. | xs:unsignedShort |
observable:minorLinkerVersion | owl:DatatypeProperty | Specifies the linker minor version number. | xs:byte |
observable:minorOSVersion | owl:DatatypeProperty | Specifies the minor version number of the required operating system. | xs:unsignedShort |
observable:minorSubsystemVersion | owl:DatatypeProperty | Specifies the minor version number of the subsystem. | xs:unsignedShort |
observable:numberOfRVAAndSizes | owl:DatatypeProperty | Specifies the number of data-directory entries in the remainder of the optional header. | xs:unsignedInt |
observable:sectionAlignment | owl:DatatypeProperty | Specifies the alignment (in bytes) of PE sections when they are loaded into memory. | xs:unsignedInt |
observable:sizeOfCode | owl:DatatypeProperty | Specifies the size of the code (text) section. If there are multiple such sections, this refers to the sum of the sizes of each section. | xs:unsignedInt |
observable:sizeOfHeaders | owl:DatatypeProperty | Specifies the combined size of the MS-DOS, PE header, and section headers, rounded up a multiple of the value specified in the file_alignment header. | xs:unsignedInt |
observable:sizeOfHeapCommit | owl:DatatypeProperty | Specifies the size of the local heap space to commit. | xs:unsignedInt |
observable:sizeOfHeapReserve | owl:DatatypeProperty | Specifies the size of the local heap space to reserve. | xs:unsignedInt |
observable:sizeOfImage | owl:DatatypeProperty | Specifies the size, in bytes, of the image, including all headers, as the image is loaded in memory. | xs:unsignedInt |
observable:sizeOfInitializedData | owl:DatatypeProperty | Specifies the size of the initialized data section. If there are multiple such sections, this refers to the sum of the sizes of each section. | xs:unsignedInt |
observable:sizeOfStackCommit | owl:DatatypeProperty | Specifies the size of the stack to commit. | xs:unsignedInt |
observable:sizeOfStackReserve | owl:DatatypeProperty | Specifies the size of the stack to reserve. | xs:unsignedInt |
observable:sizeOfUninitializedData | owl:DatatypeProperty | Specifies the size of the uninitialized data section. If there are multiple such sections, this refers to the sum of the sizes of each section. | xs:unsignedInt |
observable:subsystem | owl:DatatypeProperty | Specifies the subsystem (e.g., GUI, device driver, etc.) that is required to run this image. | xs:unsignedShort |
observable:win32VersionValue | owl:DatatypeProperty | Specifies the reserved win32 version value. | xs:unsignedInt |
From class owl:Thing | |||
core:externalReference | owl:ObjectProperty | Specifies a reference to a resource outside of the UCO. | core:ExternalReference |
core:namingAuthority | owl:DatatypeProperty | Specifies the naming authority that issued the name of the entity. | xs:string |
observable:addressValue | owl:DatatypeProperty | The value of an address. | xs:string |
observable:browserInformation | owl:ObjectProperty | Specifies information about the particular Web Browser. | observable:ObservableObject |
observable:browserUserProfile | owl:DatatypeProperty | Specifies the web browser user profile for which the URL history entry was created. | xs:string |
observable:contact | owl:ObjectProperty | Contact specifies information characterizing contact details for a single entity. | observable:ObservableObject |
observable:contactAddress | owl:ObjectProperty | Contact address specifies information characterizing a geolocation address of a contact entity. | observable:ContactAddress |
observable:contactAffiliation | owl:ObjectProperty | Contact affiliation specifies information characterizing details of an organizational affiliation for a single contact entity. | observable:ContactAffiliation |
observable:contactEmail | owl:ObjectProperty | Contact email specifies information characterizing details for contacting a contact entity by email. | observable:ContactEmail |
observable:contactGroup | owl:DatatypeProperty | Contact group specifies the name/tag of a particular named/tagged grouping of contacts. | xs:string |
observable:contactID | owl:DatatypeProperty | Specifies an ID for the contact. | xs:string |
observable:contactMessaging | owl:ObjectProperty | Contact messaging specifies information characterizing details for contacting a contact entity by digital messaging. | observable:ContactMessaging |
observable:contactMessagingPlatform | owl:ObjectProperty | A contact messaging platform specifies a digital messaging platform associated with a contact. | observable:ObservableObject |
observable:contactNote | owl:DatatypeProperty | Contact note specifies a comment/note associated with a given contact. | xs:string |
observable:contactOrganization | owl:ObjectProperty | The name of the organization a contact works for or is assocciated with. | identity:Organization |
observable:contactPhone | owl:ObjectProperty | Contact phone specifies information characterizing details for contacting a contact entity by telephone. | observable:ContactPhone |
observable:contactPhoneNumber | owl:ObjectProperty | Contact phone number specifies a telephone service account number for contacting a contact entity by telephone. | observable:ObservableObject |
observable:contactProfile | owl:ObjectProperty | Contact profile specifies information characterizing details for contacting a contact entity by online service. | observable:ContactProfile |
observable:contactProfilePlatform | owl:ObjectProperty | A contact profile platform specifies an online service platform associated with a contact. | observable:ObservableObject |
observable:contactSIP | owl:ObjectProperty | Contact SIP specifies information characterizing details for contacting a contact entity by Session Initiation Protocol (SIP). | observable:ContactSIP |
observable:contactURL | owl:ObjectProperty | Contact URL specifies information characterizing details for contacting a contact entity by Uniform Resource Locator (URL). | observable:ContactURL |
observable:emailAddress | owl:ObjectProperty | An email address. | observable:ObservableObject |
observable:favoritesCount | owl:DatatypeProperty | Specifies the number of times that this profile has favorited a tweet. | xs:nonNegativeInteger |
observable:faxNumber | owl:ObjectProperty | A phone number(account) of a fax. | observable:ObservableObject |
observable:firstVisit | owl:DatatypeProperty | Specifies the date/time that the URL referred to by the URL field was first visited. | xs:dateTime |
observable:followersCount | owl:DatatypeProperty | Specifies the followers count associated with the twitter profile. | xs:nonNegativeInteger |
observable:friendsCount | owl:DatatypeProperty | Specifies the friends count associated with the twitter profile. | xs:nonNegativeInteger |
observable:fromURLVisit | owl:ObjectProperty | Specifies the URL visit origination point (i.e., URL) of the URL captured in the URL history entry, if applicable. | observable:ObservableObject |
observable:geolocationAddress | owl:ObjectProperty | An administrative address for a particular geolocation. | location:Location |
observable:inetLocation | owl:ObjectProperty | Specifies a location on the Internet. | observable:ObservableObject |
observable:keywordSearchTerm | owl:DatatypeProperty | Specifies a string representing a keyword search term contained within the URL field. | xs:string |
observable:lastTimeContacted | owl:DatatypeProperty | Last time contacted specifies the date and time that a particular contact was last contacted. | owl:Thing |
observable:lastVisit | owl:DatatypeProperty | Specifies the date/time that the URL referred to by the URL field was last visited. | xs:dateTime |
observable:manuallyEnteredCount | owl:DatatypeProperty | Specifies the number of times the URL referred to by the URL field was manually entered into the browser's address field by the user. This field is only applicable for URL history entries generated by Google's Chrome browser. | xs:nonNegativeInteger |
observable:messagingAddress | owl:ObjectProperty | A messaging address specifies details of an identifier for digital messsaging communication. | observable:ObservableObject |
observable:namePhonetic | owl:DatatypeProperty | Name phonetic specifies the phonetic pronunciation of the name of a person. | xs:string |
observable:namePrefix | owl:DatatypeProperty | Name prefix specifies an honorific prefix (coming ordinally before first/given name) for the name of a person. | xs:string |
observable:nameSuffix | owl:DatatypeProperty | Name suffix specifies an suffix (coming ordinally after last/family name) for the name of a person. | xs:string |
observable:nickname | owl:DatatypeProperty | Nickname specifies an alternate, unofficial and typically informal name for a person independent of their official name. | xs:string |
observable:numberTimesContacted | owl:DatatypeProperty | Number times contacted specifies the number of times a particular contact has been contacted. | xs:integer |
observable:organizationDepartment | owl:DatatypeProperty | Specifies a particular suborganization (division, branch, office, etc.) that exists within a larger organization. | xs:string |
observable:organizationLocation | owl:ObjectProperty | Specifies a geolocation address of an organization. | observable:ContactAddress |
observable:organizationPosition | owl:DatatypeProperty | Specifies the title or role that a person plays within an organization. | xs:string |
observable:pageTitle | owl:DatatypeProperty | Specifies the title of a web page. | xs:string |
observable:pictureType | owl:DatatypeProperty | The type of a picture, for example a thumbnail. | xs:string |
observable:profile | owl:ObjectProperty | A profile specifies a particular online service profile. | observable:ObservableObject |
observable:profileAccount | owl:ObjectProperty | Specifies the online service account associated with the profile. | observable:ObservableObject |
observable:profileBackgroundHash | owl:ObjectProperty | Specifies hashes of the background associated with the profile. | types:Hash |
observable:profileBackgroundLocation | owl:ObjectProperty | Specifies the network location of the background associated with the profile. | observable:ObservableObject |
observable:profileBannerHash | owl:ObjectProperty | Specifies hashes of the banner associated with the profile. | types:Hash |
observable:profileBannerLocation | owl:ObjectProperty | Specifies the network location of the banner associated with the profile. | observable:ObservableObject |
observable:profileCreated | owl:DatatypeProperty | Specifies the date and time the profile was created. | xs:dateTime |
observable:profileIdentity | owl:ObjectProperty | Specifies the identity associated with the profile. | identity:Identity |
observable:profileImageHash | owl:ObjectProperty | Specifies hashes of the profile image associated with the profile. | types:Hash |
observable:profileImageLocation | owl:ObjectProperty | Specifies the network location of the profile image associated with the profile. | observable:ObservableObject |
observable:profileIsProtected | owl:DatatypeProperty | Specifies whether the twitter profile is protected. | xs:boolean |
observable:profileIsVerified | owl:DatatypeProperty | Specifies whether the twitter profile is verified. | xs:boolean |
observable:profileService | owl:ObjectProperty | Specifies the online service associated with the profile. | observable:ObservableObject |
observable:profileWebsite | owl:ObjectProperty | Specifies the website URL associated with the profile. | observable:ObservableObject |
observable:profilelanguage | owl:DatatypeProperty | Specifies the language associated with the profile. When present, it MUST be a language code conformant to RFC 5646/BCP47. | xs:string |
observable:referrerUrl | owl:ObjectProperty | Specifies the origination point (i.e., URL) of a URL request. | observable:ObservableObject |
observable:regionEndAddress | owl:DatatypeProperty | The regionEndAddress property specifies the ending address of the particular memory region. | xs:hexBinary |
observable:registrantContactInfo | owl:ObjectProperty | Specifies contact info for the registrant of a domain within a WHOIS entity. | observable:ObservableObject |
observable:sipAddress | owl:ObjectProperty | A SIP address specifies Session Initiation Protocol (SIP) identifier. | observable:ObservableObject |
observable:sourceApplication | owl:ObjectProperty | Source application specifies the software application that a particular contact or contact list is associated with. | observable:ObservableObject |
observable:statusesCount | owl:DatatypeProperty | Specifies the number of tweets that this profile has issued. | xs:nonNegativeInteger |
observable:thumbprintHash | owl:ObjectProperty | A hash calculated on the entire certificate including signature. | types:Hash |
observable:twitterHandle | owl:DatatypeProperty | Specifies the twitter handle associated with the profile. | xs:string |
observable:twitterId | owl:DatatypeProperty | Specifies the twitter id associated with the profile. | xs:string |
observable:urlHistoryEntry | owl:ObjectProperty | Specifies a URL history record stored in the browser's history. | observable:URLHistoryEntry |
observable:userLocationString | owl:DatatypeProperty | Specifies the user-provided location string associated with the profile. | xs:string |
observable:value | owl:DatatypeProperty | -- | xs:string |
observable:visitDuration | owl:DatatypeProperty | Specifies the duration of a specific visit of a URL within a particular browser. | xs:duration |
observable:visitTime | owl:DatatypeProperty | Specifies the date/time of a specific visit of a URL within a particular browser. | xs:dateTime |
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
observable:WindowsPEOptionalHeader a owl:Class ;
rdfs:label "WindowsPEOptionalHeader"@en ;
rdfs:comment "A Windows PE optional header is a grouping of characteristics unique to the 'optional header' of a Windows PE (Portable Executable) file, consisting of a collection of metadata about the executable code structure of the file."@en .