Analysis
-
max time kernel
131s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
30/08/2024, 21:30
General
-
Target
source_prepared.exe
-
Size
30.2MB
-
MD5
0bda31299646a45d875c310b6ae59efe
-
SHA1
9c9f474f170a3cb8a6dd3aff5283a98ed319e4da
-
SHA256
1460ed62538578b66c69846173b89e7ed04d258fbc45770f265b2303343c0638
-
SHA512
6ef0a305db5a43accca23bfdd63dfd4638572a1dba80e85c9765ed881047dc1262c00f8189b1e3e8441b441a7bc2048a217c423303df667ef09ccd6e0d842366
-
SSDEEP
393216:2y9l9mAQCXGV+QW8Y7v5t+NEnBSVkRIrY87WvkzIusdbw1OT27y1Zn78Sfdqf/V:t9OAQr+QW8Y7vD+szcY87WKlOZI8dQV
Malware Config
Signatures
-
Enumerates VirtualBox DLL files 2 TTPs 2 IoCs
-
Loads dropped DLL 64 IoCs
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"C:\Users\Admin\AppData\Local\Temp\source_prepared.exe"2⤵
- Enumerates VirtualBox DLL files
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"3⤵
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD5e0566014f8541b8fd2dfe508961374a6
SHA10f21cd091a6b233f881682a4017e84f4a3b2e26c
SHA256fc028ae3b8515e683236e5bd4a5bc34161677cf2a312ba0444f2c7080b77c9d5
SHA5125f50f6dc93aeacd0811d8396ad112ea19d3f4182b676102bd57b5b54079ad5ee128d8e20e411b83093154ff53bf1b37f4abb1d09287acceff4a1e7309abd94fe
-
Filesize
14KB
MD5fe49595c0449fc995e673bb474f1b280
SHA187d80522819d5f2cf5f267f68fab6cb75e3130bc
SHA2563d90c050e4ada37ba3c741d76cf677a1e5eb705d4e7940468b09f3e575a54308
SHA5126479a25bfb5f8a2bcff156f36ccd29c0c14ab6267788ef69a706bf74787fc6f2dfd3ce10d174f6a59ec5414a32f26c8d3a3121428398f3e7e740fd96d6b91cff
-
Filesize
15KB
MD5481ede5c5c651a6325d0a0953798fde7
SHA1b08a7c9493f05ee4b870b950f48150d56f759a88
SHA25602a8944134c2dbd54ebae72aeac163e3b4c6ab177b60b4a15a01fe4ae1a0d8e3
SHA512244387ee40facdb6ccf04c4476a7017139952cb1d7b307b04e1dd4ffe20aff90fec3088667589e1e083272302bfde8dd1330039e7db3457386d0ff76b206c076
-
Filesize
13KB
MD5c2d10cf0ecb1eef20ac046cdf9ae24e2
SHA1e22a06d1f8de7f8d2ce60a9cd9162db2623bd2f7
SHA2567abf667078e2c9259f0b3e6993c5ac7ea3d134c74a08546213f5ef1ee209ee63
SHA51277b1eb4bb22b8ef2106669a7eddf4dc4941f15c38ddd1d15511b4c5acb5c23fe2cf8ce1e209f5c7ff8daf74b20d3579b58097a45bf0bb54c7be647651a974bf6
-
Filesize
14KB
MD5f920d9410d97cb7d84c4bb1522217b55
SHA10bba293073a1a04538f8ef252a72c0068aba9b8a
SHA25634d02be1b4e9579ad1afa986569ea2e045244281f48bcbdcae6babbd05b693b6
SHA512a9fb698aa75816171803a0d4facd98ac78994d11ca785e4fe426497c0f1d21f651e2c64489378acd94dc40a776cdb173a926b306a981f4c4d788bf77a96589f2
-
Filesize
15KB
MD55007ca4c907030e06da15570ea5515bd
SHA1cbb0e29b5fc1b2a50c5736e1b49c894553fe7dd6
SHA2563e9630b60fd597ef0dd40f4ff1fed5731880afd57a6acbc305a6406ca6d24b7f
SHA512d6519576507419115ea29209d26ea072d17dbf72ce99bf0bd4934c638d82f037ab7a8612b03cdf76f417b0204bf370606b662cf2fa61f50c6f73e4a6a264dab0
-
Filesize
17KB
MD5cb04b053a5bd807e79bf0bd5da19f27b
SHA176999ab3f458248376033940812fd21565a80020
SHA2569116d66017123d3fb540048f7b158e5a84ce31535384c869976b8c35d98cc9d4
SHA512c458971800b3a6019492f880741efdad381e31add770fac44635afd78bbfec8fd427a50527b561f0ea0200d28fdc3ede6444a53064091046a9e210fd84880edb
-
Filesize
13KB
MD5eeb024c4e178a11d0f8108f70ac1cab0
SHA1f7e9e18399f4c5c0a5b9612fe6581bb73bbd0f28
SHA2564ff4bab898adea6b388cd267c06add42898d2498c24305e5d442a684b5601081
SHA51272a60d2570ed6d116052aa7ff11414efed4de72c125a58726f670767cf88de33c92911444a5e67746a5973234f318e5d7a4cd5cff12c9a5af81b3fcfb01e07cf
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
37KB
MD575e78e4bf561031d39f86143753400ff
SHA1324c2a99e39f8992459495182677e91656a05206
SHA2561758085a61527b427c4380f0c976d29a8bee889f2ac480c356a3f166433bf70e
SHA512ce4daf46bce44a89d21308c63e2de8b757a23be2630360209c4a25eb13f1f66a04fbb0a124761a33bbf34496f2f2a02b8df159b4b62f1b6241e1dbfb0e5d9756
-
Filesize
34KB
MD533a959c2614c1ba881c9913696c67651
SHA1ded8d8bee5177a255011be5b215b139c8c488ead
SHA256afc7cf63e2e3f2d2fcda1d347e71777d3df8cd086d3e72f00acd67934791a9a0
SHA512f7e732995d7f26b2066dbce6dddb6cc74c449748892e2db224be0fdc591e30914a090e2953458b3a85042f2d7fba08f86f3f02ca9f759708d5247e12c8b73500
-
Filesize
46KB
MD5001e400d4f1b990fed96d79b886a31d1
SHA11ff78d878ebfd93d500ef010010fe13f63c51175
SHA2561e297c76fdbd6d36933b95584c66acd1d8a0316169971c94974ef6ef565366c5
SHA5122bb7778df4d18f415b856fe6474f13ad42876594a5b62249c033c1987dd3e15d3df6ce17b8876d7dfc6505ad575dbe94a9052a148aebf27ac0e89af64e448ff3
-
Filesize
70KB
MD5c23061a08faf3a6595065d1588a68840
SHA19e9c5e4877298df1d91d28e204dc3bdfa69d6b45
SHA25649893c8f3e186203dbf2ff912aeb58bdf3e393560fd33582a75fa3356a9ea545
SHA5120f41a37a59fb7952863f438e589ce057486191e2bd7face4fb68d90b89a488cd8614623655bb1e41b28124fea836f509c6dfb80941c9dbd6524e660e757e4b55
-
Filesize
56KB
MD535ed0c8206d9c49504a42df3118a2b06
SHA1d4148f4b98171fc71f502fca98f5b8d8839ddaee
SHA256f45186bb8b794da8672eab28d7f55e6a37a44d77fecf3eb2646a3193f4914874
SHA512c6daa7c3de5ddfc58b21217a16e30c1bf7c9e41859e0d37fe55cad45ffad8f4db79caf9de5524e1f738808bfa7b438cfc187b4bce5f321f66b7d858fe0c1ac52
-
Filesize
103KB
MD5a4d9986048c460110c0ac116e5f1c666
SHA180cde175f1ee5522a6ac3e9cbb8a954b82c78b78
SHA256655b0a55cb3003c813c448f566861c11f3bd586c59e02412f113feb8a363b677
SHA512599595a19f92632824d96e768cc591f1b5e92c75de1ffbc5b2991cd20c4ad998f87f367dc3f2de299c530097033235841bd5bcec8e7127b6f4ad7ec9a828a6b8
-
Filesize
33KB
MD5d739520f67e7b96c851c362b13453a7d
SHA12e6f2a9ad034eb5572c8eb595a2973de00c450fc
SHA256d62f84f07831c7ecae8c94fc647f35bc1c0b0d659f6649fd6829dac733c085cb
SHA512994ec042e13f5a6164a5046fccf5d6f16dc9b5f7517b6219cde90cf0d8554090eedb5de51f64c5abebe4a3e5237af210f06106f41bcdaab29660fdbf9e5b146a
-
Filesize
84KB
MD51f1dc60560fd666e6e5b3a6dde762f0a
SHA1f509508967c2933feb2ffe86ba9259f18d9d1dc1
SHA256b7aba82e77bb5364c7ea2bd6ff9d0dbea6a141b4128f78b3cd2f9a63d693caf3
SHA5127b464464652a14d493483464e9733762d4b81e81fdb06a9fad36ba92b5d4d47c28c0d5355f858049707860d0ff8f634e5173b0727de1443eccdb4bb26ad36fec
-
Filesize
28KB
MD5668b774674816454edabf76dc2e8bbf7
SHA1b18b91b6a95d2cf0a691b70bd4789ebdf1edb705
SHA2569166147dcbb8e63324dc2af8d73a1be7a4c77211f7d886eed2938607c2913826
SHA5127439ba293ae66271093da726f09dfa69cfb055c5722ee71e544eb9f7108603a3c1bf302366d62b050c20f8c3d7c3f05d0493297d42711e7b15630d511d1ba335
-
Filesize
25KB
MD5dbd9f7999089b50318f3dec1b3bd9c38
SHA108953246685252ecda3ea5a5081b7989fa7d04c8
SHA2561ac8697a152a4d99a1efefd4bb7f21fe20780b7fa05af00b0db5b7e87836c2c9
SHA51270125e856c8269d6831417fa975c96ec7d52f330152bedd0f165905a44c459a84c66547f0ff19ab0ed3a88796d4385a93f8621924bb78d693e7f4672776baa77
-
Filesize
30KB
MD559900f9e5774b0423c593ecc6b368563
SHA13eba951654255924d8f5a5789b2985b3aa64cd1d
SHA25678130cf5406b1ac068e89908901ce2589ab4c2e2d933b2fde88fab9753a7617e
SHA512bbd1d542e42f3015d09a7813d34aa767abb5df0c2dd8efac91ba405307f75de552f46f156f9ad397f4bc9c9a590725e6e24f005a4eb699ee573231aecb566438
-
Filesize
127KB
MD5bf9f5464020792a3a1042bc7d5a22cb7
SHA19703d95401c24fee99a016ee78dcc2e914b3f401
SHA256579b787831108e8af7bedb93f90decc7ebab26fa0469e0524429b3dbba043d67
SHA512be198eae15c8820bfc1bc6ab72ebdc574396cfd6a0f2753d9f1be55492b511b28c24c5b057fa599265e0a81b9eccca6bf715e013c81ea94cecd5efcf122cd176
-
Filesize
24KB
MD576085aca5511e13a547b5e4a98e15bd3
SHA13328b85533f0c549ebdd8bc5c77b4f3ed1ed618d
SHA256b5b6d6c055f58fc44576ae4490a36a1a0a6cd10827f9c7605d8e46365edcd773
SHA512ef48fd39c52ef5cbac67245146d0c22c1a664ee878760ce9533145c5052964af8c079aec7793a803cab3da58ab74c86d93bd19ab7c433feafc798d7b524740de
-
Filesize
41KB
MD574ddc73184701a1378a36e0494b84b74
SHA19b81c3e23f2751a14cc8ef16d7ab64b5d4abd9a5
SHA256e3219e905226441a6de3d1d1420aa11de3f0368dcd2aa85dc5283b702dca96cf
SHA51265e072080b543ea20b6a272312249bb166728583d514d3b86351ca65dc620fb55005aa3899382486bd8db61b521c9572b2ee8b33196b3aa524d177d7474c737f
-
Filesize
48KB
MD505e2a32c271cbeb41b177c91d4136872
SHA1cad145d665409e7e999f21db8e48956035d6eafb
SHA2562ff94ef85f93a79a07e85ad7accbce79bd167234342e01f26636f9c7507affe6
SHA512e6fe3630affa31db4ce98bc7b17f7334182137b86a8ec2e12d0064534dd3dab268dd853ff09d0677a7d1f531e28a4a9a269d2637b09cca879a993b52566bdde6
-
Filesize
60KB
MD51883bfef9670e3d5f8f2a4395e9cc716
SHA1c79a65879ee289c926a5a56b2ec833781a483751
SHA2565278c2e8b033d10448f4b09ada23f3692f33e6cba36a680a0398de0d51f26e0e
SHA512ff9e09b7b40c50a2a727e24340122bfda2e559421e15aaede9ab92f5a716a5c05f6c5ee5dc56e646586b6cb63268084ca02cbd811ea4278788ce45e9cd9cbd39
-
Filesize
37KB
MD565fcdef212d4d051e191bf19db4b8670
SHA19ac5babed404b6c153931870f453200239e7d399
SHA256cc54efe587f1bcf52bd4f2a1c90ece2a3e70a1193775118507177556374f9344
SHA512afeba98ca8ee81b301304f16de391785eb97c6032f8bbcfa9c9cd6827c52f3944b45ceaa425c3f5957de6e7843754cf02eaaf376bc1a99d8e67a32b6c12f9233
-
Filesize
21KB
MD5ee02ef4972de5e5800285702755b4b95
SHA1d51f5fef0c03b93016c749694f6f013218031b1d
SHA2560081ebd9ecf7e5e690ae9a1cf5450e018c84bdf98dc9b6a45b1a6d527411ec96
SHA5128233734de4c51d2a2aeed94059c183e6d5c7d66ec9d1c31a54aab23f2aa10a6c483a1d7284fc345215bdc89d2831ad0e63fdfd560b36cd469b393a6d77efe033
-
Filesize
859KB
MD510ecc362425b289a07e66c48d74b24a0
SHA1ee4d354c40074e2320eb6e44408befc6d98f02cc
SHA2561514a85c2b50216cddff768dbbfdf674ea7ece3df48e9282c3d9b1b0137db7a2
SHA512b2df903a48d7e80740b4855ddc4c129013f83db37e88e7df004c272563bd26ad547e9bceea08835d6a7697c52aff8f17be1fa7a130241d77d036b89fb36fe8e4
-
Filesize
1.1MB
MD58e7025186c1c6f3f61198c027ff38627
SHA179c6f11358c38bda0c12ee1e3ab90a21f4651fa1
SHA256f393f54886674e42bb7667087c92af67bd46e542c44ddff11c5061481261c90e
SHA5124bbbf7d0a51aec361779d7735c6a91f1bdd468da0aaa3626c3cb52128c998d6454be8c473c8743172ffcea9dc66403a5a81ff5535d9baf87fa6ab990a35add41
-
Filesize
23KB
MD536b9af930baedaf9100630b96f241c6c
SHA1b1d8416250717ed6b928b4632f2259492a1d64a4
SHA256d2159e1d1c9853558b192c75d64033e09e7de2da2b3f1bf26745124ed33fbf86
SHA5125984b32a63a4440a13ebd2f5ca0b22f1391e63ac15fe67a94d4a579d58b8bb0628980a2be484ac65ad3a215bbe44bd14fe33ec7b3581c6ab521f530395847dd5
-
Filesize
217KB
MD5e56f1b8c782d39fd19b5c9ade735b51b
SHA13d1dc7e70a655ba9058958a17efabe76953a00b4
SHA256fa8715dd0df84fdedbe4aa17763b2ab0db8941fa33421b6d42e25e59c4ae8732
SHA512b7702e48b20a8991a5c537f5ba22834de8bb4ba55862b75024eace299263963b953606ee29e64d68b438bb0904273c4c20e71f22ccef3f93552c36fb2d1b2c46
-
Filesize
203KB
MD50bfdc638fbe4135514de3aebf59fa410
SHA1963addfdadf918339dfcab33e07bb6c48c86099e
SHA25677affb7e88ab70fa04e382e29bf04a94ddf36c5cbd88b29ff33e15912d83ed01
SHA512768abcc391eea4a3b34b0aade99932cd9befb922dcf9e720edf4c4719938214236e8668eca67026bd07567fbd10bbba98d63f47d63a81c7be1adce3bdd1973e4
-
Filesize
86KB
MD5d930198dfbd47f7e746616dd6103a044
SHA11f03785014c42a68f740f82cf2adc9c701faa910
SHA25657788a94ce93ebed829de17e9c49f481067fdb6561bbc11a1f50a545fe102157
SHA5125a4c7318064d64b5c981ab77898a570c204e01744e61f2d956f8f8757fc32b63d8ce8c09bca01dca1defdde1baae61a8ad812f4236028c83ec5bc8785be4d1b4
-
Filesize
63KB
MD5e0ca371cb1e69e13909bfbd2a7afc60e
SHA1955c31d85770ae78e929161d6b73a54065187f9e
SHA256abb50921ef463263acd7e9be19862089045074ea332421d82e765c5f2163e78a
SHA512dd5a980ba72e4e7be81b927d140e408ad06c7be51b4f509737faee5514e85a42d47518213da1c3e77c25f9bd2eb2109fca173d73d710ff57e6a88a2ff971d0b4
-
Filesize
1.4MB
MD5d53251f4484a0092b00b9451423a5e38
SHA10e15a558ec6ae369147ae07a828c0f9d68dceabe
SHA2569e1dc8da1ed1d0aeacf2b636bd20704d683d0ff15ac0be0c16616a247a9c070b
SHA512ef9ce3c61d2f4b128eb092e9ae32c4433994aa7ba6f6a25e59c2cbd7afb35155becf8941a8c13e17a57902b7bb5022c06bc1dc5e8ccc1c47d22dbe8c39037649
-
Filesize
24KB
MD5959e471b8496a2c68649bad5dfa865eb
SHA1eb0d58cda97190d2e57f7d594c4d5f2e3314ea56
SHA256e7f17d68107e4154879412da5d99fb8b3e3d25b602355f67e13c6a91106eaeb3
SHA51221cae515d08e7d2b50eed1d4bf09abb195e8dfbb7812b1b6e1f0ec4ff2dbe275ffa70ca062e0a65cf2124229f26730052e6d1dc0f26520ac1e505366f91d853c
-
Filesize
606KB
MD57dc915e7cc5afbc8b275be0a79338daf
SHA1be47ba1e341c7a98fd65999c1c2ad55e455a495c
SHA2568011f64536efd23d5c7a5988a9461a236191a62732e7be2e331d0b02fae60823
SHA51258f3e2fe70cc720399c01a77b557bd8c7ae91195d0aa98c1d3dca408b2a2e2a1b56011823b6b72dd66007097b208ba8b7dc4971904ab3748930b663f7e17461a
-
Filesize
672KB
MD52ac611c106c5271a3789c043bf36bf76
SHA11f549bff37baf84c458fc798a8152cc147aadf6e
SHA2567410e4e74a3f5941bb161fc6fc8675227de2ad28a1cec9b627631faa0ed330e6
SHA5123763a63f45fc48f0c76874704911bcefe0ace8d034f9af3ea1401e60aa993fda6174ae61b951188bec009a14d7d33070b064e1293020b6fd4748bee5c35bbd08
-
Filesize
620KB
MD519adc6ec8b32110665dffe46c828c09f
SHA1964eca5250e728ea2a0d57dda95b0626f5b7bf09
SHA2566d134200c9955497c5829860f7373d99eec8cbe4936c8e777b996da5c3546ba7
SHA5124baa632c45a97dc2ca0f0b52fd3882d083b9d83a88e0fa2f29b269e16ad7387029423839756ee052348589b216509a85f5d6ee05a1e8a1850ce5d673ae859c27
-
Filesize
288KB
MD5fe56a8560877b061f4b0546b18a3a7f7
SHA166327f366e9ea70196cf4dbccfca1c93b9efc9cf
SHA2566aea5ad83a3f85d960c1372a08cb8005204f41c48794d932a6131380f976a319
SHA5126a7cff56a3a314f18c9fb644f6cb0c89c64334040ba1f8f9841e81256f1dbd305e53794609472bc956f0884cb4516a577acf687f5e34e1eb6d06c341032d937a
-
Filesize
136KB
-
Filesize
1.4MB
-
Filesize
216KB
-
Filesize
52KB
-
Filesize
736KB
-
Filesize
80KB
-
Filesize
100KB
-
Filesize
68KB
-
Filesize
72KB
-
Filesize
184KB
-
Filesize
60KB
-
Filesize
216KB
-
Filesize
68KB
-
Filesize
84KB
-
Filesize
68KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
64KB
-
Filesize
84KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
80KB
-
Filesize
60KB
-
Filesize
3.5MB
-
Filesize
3.5MB
-
Filesize
100KB
-
Filesize
180KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
56KB
-
Filesize
80KB
-
Filesize
144KB
-
Filesize
60KB
-
Filesize
4.4MB
-
Filesize
60KB
-
Filesize
180KB
-
Filesize
100KB
-
Filesize
144KB
-
Filesize
4.4MB
-
Filesize
184KB
-
Filesize
52KB
-
Filesize
100KB
-
Filesize
92KB
-
Filesize
100KB
-
Filesize
308KB
-
Filesize
68KB
-
Filesize
40KB
-
Filesize
120KB
-
Filesize
372KB
-
Filesize
84KB
-
Filesize
164KB
-
Filesize
184KB
-
Filesize
136KB
-
Filesize
124KB
-
Filesize
1.1MB
-
Filesize
92KB
-
Filesize
112KB
-
Filesize
308KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
44KB
-
Filesize
68KB
-
Filesize
120KB
-
Filesize
44KB
-
Filesize
164KB
-
Filesize
184KB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
372KB
-
Filesize
48KB
-
Filesize
124KB
-
Filesize
1.4MB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
72KB
-
Filesize
208KB
-
Filesize
52KB
-
Filesize
112KB
-
Filesize
44KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
752KB
-
Filesize
172KB
-
Filesize
2.9MB
-
Filesize
32.9MB
-
Filesize
92KB
-
Filesize
132KB
-
Filesize
136KB
-
Filesize
624KB
-
Filesize
288KB
-
Filesize
136KB
-
Filesize
124KB
-
Filesize
308KB
-
Filesize
100KB
-
Filesize
92KB
-
Filesize
80KB
-
Filesize
64KB
-
Filesize
84KB
-
Filesize
68KB
-
Filesize
84KB
-
Filesize
68KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
60KB
-
Filesize
3.5MB
-
Filesize
736KB
-
Filesize
64KB