0c2149886c13e4eae4a6ca25ee71d47423c5c8740a874cf04ff816d1b2c901d7
The file is the module exactly as the page had it. WebAssembly does nothing on its own: it runs only when a script instantiates it. Labels describe what the module contains and are leads, not verdicts.
At a glance
- What it is
- Not identified. Its build does not name it and it matches no library we know.
- How it was built
- Not named in the module.
- What it can do
- None of its imports reaches the network, runs code or changes the page. Judged from the names of its imports.
- Where we saw it
- On 1 public scan, 2026-10-11.
- Findings
- Nothing flagged by the checks below.
- Size
- 25.1 KiB
- First seen
- 2026-10-11
- Last seen
- 2026-10-11
- Public scans
- 1
- Functions
- 59
- Imports
- 2
- Exports
- 12
- Data segments
- 20
How it was built
The module names no language, compiler or build tool. Release builds often strip this information, and hand-written modules usually lack it.
Hashing and cipher code
Algorithms recognised from their published constants, tables and rotation amounts: SHA-512 or BLAKE2b. Legitimate modules use them all the time, for hashing, captchas and encryption, so this is a lead, not a verdict.
- function 25SHA-512 or BLAKE2b · constants in its code
Decompiled code
59 of 59 functions decompiled to C-like pseudocode; 2 more are imported from the page.
Decompiled code is a reconstruction from the file, so names and types are often guesses. Query values in URLs are masked here; the downloaded file is unchanged.
| Function | Size | Blocks | Complexity | Notes |
|---|---|---|---|---|
| No functions match. | ||||
File layout
WebAssembly binary format version 1, core module, 10 sections.
| Section | Offset | Size | Items |
|---|---|---|---|
| type | 0x8 | 150 bytes | 18 |
| import | 0x9e | 15 bytes | 2 |
| function | 0xad | 62 bytes | 59 |
| table | 0xeb | 7 bytes | 1 |
| memory | 0xf2 | 9 bytes | 1 |
| global | 0xfb | 11 bytes | 1 |
| export | 0x106 | 51 bytes | 12 |
| element | 0x139 | 10 bytes | 1 |
| code | 0x143 | 22.4 KiB | 59 |
| data | 0x5b08 | 2.4 KiB | 20 |
- Memory
- 256 pages (16.0 MiB), up to 32,767 pages (2.0 GiB)
- Table
- 3 entries, up to 3 entries, funcref
- Globals
- 1
- Element segments
- 1
- Function names
- none (names were stripped)
Data segments
Each bar is one segment of the module's data: as wide as its size, as tall as its entropy. Bars above the dashed line are encrypted or compressed. 20 segments, 2.2 KiB in all.
Scripts that carry or load it
- www.svenskfilmdatabas.se carries it as text and loads it; the script is minified or bundled.
From public scans. A script loads a module when it fetches or compiles it.
In our sandbox
- Nothing notable.
Checks we ran
- Threat-feed matches: none
- Names of mining software or pools: none
- CryptoNight mining structure: not found
- Hashing or cipher loops: none
- Known hashing or cipher algorithms: SHA-512 or BLAKE2b
- Encrypted or compressed data: none
- JavaScript stored inside: none
- Other modules inside: none
- Imports that read browser or page details: none
- Function names: removed (usual in release builds)
Static checks of the file: nothing in it was run for these. A finding is a lead, not a verdict.
Seen on 1 public scan
| Page | Title | Seen | How it got there |
|---|---|---|---|
| www.svenskfilmdatabas.se | Svensk Filmdatabas – den bästa källan om svensk film | 2026-10-11 | Built by a script at run time; Embedded in a script |