| Typicality: | 0.419 |
| Saliency: | 0.396 |
| into the runtimebroker.exe process | 9 | transitive-object |
| into web browsers | 3 | transitive-object |
| into rundll32.exe | 2 | transitive-object |
| trojan → inject → malicious code | 5 |
| trojan → inject → its code | 3 |
| trojan → inject → code | 3 |
| negative | neutral | positive |
| 0.465 | 0.514 | 0.021 |
| Raw frequency | 11 |
| Normalized frequency | 0.396 |
| Modifier score | 0.500 |
| Perplexity | 49.091 |