PropertyValue
http://www.w3.org/1999/02/22-rdf-syntax-ns#type
http://www.w3.org/ns/prov#value
  • Within that directory is a file with a .ct extension that contains the victim???s IP address, a string that is likely a victim ID, a list of command and control domains, and a working directory of the malware, Microsoft said.
http://www.w3.org/ns/prov#wasQuotedFrom
  • threatpost.com