| http://www.w3.org/ns/prov#value | - Having retrieved the samples (the author having posted the malware samples on a public website!!!) it appears a few extra settings were required, in particular, one of the samples was a email stored as MIME but the 'decode MIME' option wasn't turned on.
|