| N/A | |
| HTML document, ASCII text, with very long lines, with CRLF, LF line terminators | 100584 |
| N/A | |
| 50e789b342961bda8813dce4e9dafa55 | |
| 38764b6f13aec0bde9af3ccdfc98b654ca0f48d0 | |
| 9c927af245ecfbdd65f837bbb120156d7cba602da9ec0f45a0c74b9845c18220 | |
| N/A | |
| N/A | |
| N/A | |
| N/A | |
| Source: |

| ALYac | JS:Trojan.Cryxos.1772 |
| AVG | JS:Iframe-EXC [Trj] |
| Ad-Aware | Application.CoinMiner.CG |
| Antiy-AVL | Trojan/JS.CoinMiner.a |
| Arcabit | Application.CoinMiner.CG |
| Avast | JS:Iframe-EXC [Trj] |
| Avira | PUA/CryptoMiner.Gen |
| BitDefender | Application.CoinMiner.CG |
| CAT-QuickHeal | HTML.Downloader.33022 |
| Comodo | TrojWare.HTML.ExpKit.C@7rkkrv |
| Cyren | JS/CoinHive.A!Eldorado |
| DrWeb | JS.Miner.16 |
| ESET-NOD32 | HTML/ScrInject.B |
| Emsisoft | Application.CoinMiner.CG (B) |
| F-Prot | JS/CoinHive.A!Eldorado |
| F-Secure | JS:Trojan.Cryxos.1772 |
| Fortinet | JS/Cryxos.31AC!tr |
| GData | Script.Application.Coinminer.BD |
| Ikarus | PUA.CoinMiner |
| Kaspersky | HEUR:Trojan.Script.Generic |
| MAX | malware (ai score=80) |
| McAfee-GW-Edition | BehavesLike.HTML.ExpKitGen2.nq |
| MicroWorld-eScan | Application.CoinMiner.CG |
| Microsoft | Trojan:Win32/Skeeyah.A!bit |
| NANO-Antivirus | Riskware.Script.Miner.fjhmje |
| Rising | Trojan.CoinMiner!8.30A (TOPIS:E0:Dkt11bCF8jM) |
| Sophos | Coinhive JavaScript cryptocoin miner (PUA) |
| TrendMicro | Possible_CoinHive-HTM01b |
| TrendMicro-HouseCall | Possible_CoinHive-HTM01b |
| Zillya | Trojan.CoinMiner.JS.3 |
| ZoneAlarm | HEUR:Trojan.Script.Generic |