This appears to be some Chinese source with the same info: https://cn-sec.com/archives/853339.html

Looking at Github and uses of SerializationUtils.deserialize this is going to be painful.