fe802a8789a0eb32982887f63e935b389bb55cd54d1e994711808a70e576a6d9

Download .wasm Search scans with this module

The file is the module exactly as the page had it. WebAssembly does nothing on its own: it runs only when a script instantiates it. Labels describe what the module contains and are leads, not verdicts.

At a glance

What it is: Not identified. Its build does not name it and it matches no library we know.
Names it came with: File name: zetaplex. Its build and the addresses it came from say so; whoever builds a module chooses these, so they are hints.
How it was built: Written in Rust. wasm-bindgen connects it to the page's JavaScript.
What it can do: Its imports reach: page content, storage. Judged from the names of its imports.
Where we saw it: On 1 public scan, 2026-10-20.
Findings: Nothing flagged by the checks below.

Size: 97.6 KiB
First seen: 2026-10-20
Last seen: 2026-10-20
Public scans: 1
Functions: 169
Imports: 56
Exports: 15
Data segments: 10

How it was built

Written in Rust. wasm-bindgen connects it to the page's JavaScript.

Language: RustThe Rust compiler (rustc) left its name in the module.
Connects to JavaScript: wasm-bindgenRust's bridge to JavaScript. It writes glue code on both sides, so the module can call page functions such as fetch or the DOM, and the page can call the module.
Rewritten after compiling: walrusA library for rewriting compiled modules. wasm-bindgen runs it on every build, so it comes with wasm-bindgen and says nothing more about the module.

Read from text inside the module (its build metadata and paths the compiler left) and from its import and export names. Whoever builds a module can change or remove these, so treat them as hints. They say how a module was made, not what it does.

What it is made of

1 Rust crate from crates.io, with the versions it was built with:

once_cell 1.20.2

Build tools and versions it names:

Rust
rustc 1.79.0 (129f3b996 2024-06-10)
walrus 0.23.3
wasm-bindgen 0.2.100 (2405ec2b4)

Read from text the build left in the module: source paths, build metadata and .NET metadata. Whoever builds a module can change or remove it, so treat it as a hint.

Decompiled code

168 of 169 functions decompiled to C-like pseudocode; 56 more are imported from the page.

1 of 169 functions could not be decompiled.

Decompiled code is a reconstruction from the file, so names and types are often guesses. Query values in URLs are masked here; the downloaded file is unchanged.

Find a functionSortShow

Function	Size	Blocks	Complexity	Notes
No functions match.

File layout

WebAssembly binary format version 1, core module, 12 sections (2 custom).

Section	Offset	Size	Items
type	0x8	251 bytes	34
import	0x103	2.2 KiB	56
function	0x9b5	174 bytes	169
table	0xa63	7 bytes	1
memory	0xa6a	5 bytes	1
global	0xa6f	11 bytes	1
export	0xa7a	613 bytes	15
element	0xcdf	207 bytes	4
code	0xdae	85.7 KiB	169
data	0x1649c	8.3 KiB	10
custom: producers	0x185d1	126 bytes
custom: target_features	0x1864f	46 bytes

Memory: 17 pages (1.1 MiB), no upper limit
Table: 108 entries, up to 108 entries, funcref
Globals: 1
Element segments: 4
Function names: none (names were stripped)
Target features: +mutable-globals +sign-ext

Data segments

Each bar is one segment of the module's data: as wide as its size, as tall as its entropy. Bars above the dashed line are encrypted or compressed. 10 segments, 8.2 KiB in all.

data segment encrypted or compressed 7.5 bits per byteHeight: bits per byte. Width: share of all the data.

Imports (56)

Can reach: dom, storage.

Imports from wbg are wasm-bindgen glue. Each __wbg_… import calls one JavaScript function in the page, and its name says which (__wbg_fetch_… calls fetch). The __wbindgen_… imports are wasm-bindgen's own helpers for strings, errors and memory.

wbg.__wbg_error_436757c74ea26853
wbg.__wbindgen_object_drop_ref
wbg.__wbg_now_2b23006998c4590d
wbg.__wbindgen_string_new
wbg.__wbindgen_object_clone_ref
wbg.__wbindgen_cb_drop
wbg.__wbg_instanceof_Window_def73ea0955fc569
wbg.__wbg_document_d249400bd7bd996d
wbg.__wbg_localStorage_1406c99c39728187
wbg.__wbg_requestAnimationFrame_d7fd890aaefc3246
wbg.__wbg_setonkeydown_2f9a4c3fd4d2bc52
wbg.__wbg_createElement_8c9931a732ee2fea
wbg.__wbg_getElementById_f827f0d6648718a8
wbg.__wbg_setonload_264a0d330b7166fb
wbg.__wbg_addEventListener_90e553fdce254421
wbg.__wbg_data_d1ed736c1e42b10e
wbg.__wbg_newwithu8clampedarrayandsh_7ea6ee082a25bc85
wbg.__wbg_clientX_687c1a16e03e1f58
wbg.__wbg_clientY_78d0605ac74642c2
wbg.__wbg_instanceof_CanvasRenderingContext2d_df82a4d3437bf1cc
wbg.__wbg_setfillStyle_2205fca942c641ba
wbg.__wbg_drawImage_03f7ae2a95a9605f
wbg.__wbg_getImageData_c02374a30b126dab
wbg.__wbg_putImageData_4c5aa10f3b3e4924
wbg.__wbg_fillRect_c38d5d56492a2368
wbg.__wbg_instanceof_HtmlCanvasElement_2ea67072a7624ac5
wbg.__wbg_setwidth_c5fed9f5e7f0b406
wbg.__wbg_setheight_da683a33fa99843c
wbg.__wbg_getContext_e9cf379449413580
wbg.__wbg_toDataURL_eaec332e848fe935
wbg.__wbg_offsetX_adb14e39bdd32e22
wbg.__wbg_offsetY_e88dc24ec0418dd4
wbg.__wbg_getItem_17f98dee3b43fa7e
wbg.__wbg_setItem_212ecc915942ab0a
wbg.__wbg_instanceof_TouchList_c3968a7e97e3cb7b
wbg.__wbg_item_aea4b8432b5457be
wbg.__wbg_keyCode_237a8d1a040910b8
wbg.__wbg_key_7b5c6cb539be8e13
wbg.__wbg_appendChild_8204974b7328bf98
wbg.__wbg_setsrc_c239193cc7ab0470
wbg.__wbg_new_6377da097a44ce6e
wbg.__wbg_touches_6831ee0099511603
wbg.__wbg_newnoargs_105ed471475aaf50
wbg.__wbg_call_672a4d21634d4a24
wbg.__wbindgen_is_undefined
wbg.__wbg_static_accessor_GLOBAL_THIS_56578be7e9f832b0
wbg.__wbg_static_accessor_SELF_37c5d418e4bf5819
wbg.__wbg_static_accessor_WINDOW_5de37043a91a9c40
wbg.__wbg_static_accessor_GLOBAL_88a902d13a557d07
wbg.__wbindgen_debug_string

Exports (15)

Scripts that carry or load it

zetaplex.se loads it.

From public scans. A script loads a module when it fetches or compiles it.

Text it passes to the page

Fixed text the module hands to the page's JavaScript when it calls an import, read from the module file. Imports that reach the network, run code or change the page come first; web addresses are shown as their host.

Import	Text
wbg.__wbg_createElement_8c9931a732ee2feapage content	canvas
wbg.__wbg_newnoargs_105ed471475aaf50	return this
wbg.__wbg_setfillStyle_2205fca942c641ba	rgba(30,40,70,0.2)
wbg.__wbindgen_string_new	no `localStorage` available
wbg.__wbindgen_string_new	failed to access localStorage
wbg.__wbindgen_string_new	no value found in localStorage for the given key
wbg.__wbindgen_string_new	no document on window
wbg.__wbindgen_string_new	could not get 2d context
wbg.__wbindgen_string_new	canvas element not found

In our sandbox

Produced 4 strings at run time, listed below.

Strings it produced at run time

Text that appeared while it ran and is not in the file: decoded, decrypted or built by its code. Web addresses are shown as their host.

panicked at src/lib.rs:621:38:
called `Option::unwrap()` on a `None` value
panicked at src/lib.rs:726:36:
panicked at src/lib.rs:748:36:

Checks we ran

Threat-feed matches: none
Names of mining software or pools: none
CryptoNight mining structure: not found
Hashing or cipher loops: none
Known hashing or cipher algorithms: none recognised
Encrypted or compressed data: none
JavaScript stored inside: none
Other modules inside: none
Imports that read browser or page details: 3
Function names: removed (usual in release builds)

Static checks of the file: nothing in it was run for these. A finding is a lead, not a verdict.

Shares code with

Other modules that contain some of the same functions. They are ranked by functions few modules have, so a language's own runtime does not link every module built with it. Shared code often means a shared library or the same developer. It is a lead, not a verdict.

c8f3ccc5…f01b152.7 MiB · first seen 2026-10-07 · 41 functions in common (46% of this module's, 4% of that one's)
f28f1669…83f317226.1 KiB · first seen 2026-10-15 · 12 functions in common (14% of this module's, 4% of that one's)
4eb7b21e…cfee2d35.2 KiB · first seen 2026-10-05 · 9 functions in common (10% of this module's, 26% of that one's)
6e45ba2c…cd5f7844.9 KiB · first seen 2026-10-16 · 6 functions in common (7% of this module's, 11% of that one's)

Seen on 1 public scan

Page	Title	Seen	How it got there
zetaplex.se	—	2026-10-20	Built by a script at run time; Downloaded as a file