chg: build.rs(for vc runtime) to rustflags in config.toml and replace default global memory allocator with mimalloc. #777

fukusuket · 2022-10-23T06:37:52Z

What Changed

fix: remove build.rs & change allocator to mimalloc #657
delete build.rs(static_vcruntime crate) and set rustc compile option in ./cargo/config.toml.
- because we don't want to manage crate dependency and config in build.rs.
- details of options set in rustflags are described #657 issue comment.
change default memory global allocator to mimalloc.
- for performance improvement. I referred to this performance guide.

Evidence

Environment

OS: Windows 10 Home edition
Hard: Memory 16GB , Core 8, laptop
Data: hayabusa-sample-evtx

Test1

Compare the below execution speed of ver1.7.2 and the fixed version 3 times each.
.\hayabusa.exe -d C:\tmp\hayabusa-sample-evtx -o out.csv

then execution time is as follows.

ver1.7.2

Elapsed Time: 00:00:20.380
Elapsed Time: 00:00:20.374
Elapsed Time: 00:00:20.493

fixed version

Elapsed time: 00:00:17.313
Elapsed time: 00:00:17.236
Elapsed time: 00:00:17.235

Test2

Compare the detection results ver1.7.2 and the fixed version.
I confirmed that the number of detections is the same.

ver1.7.2

Results Summary:

Events with hits / Total events: 19,549 / 47,458 (Data reduction: 27,909 events (58.81%))

Total | Unique detections: 32,864 | 580
Total | Unique critical detections: 47 (0.14%) | 19 (3.28%)
Total | Unique high detections: 6,222 (18.93%) | 260 (44.83%)
Total | Unique medium detections: 1,566 (4.77%) | 170 (29.31%)
Total | Unique low detections: 6,781 (20.63%) | 78 (13.45%)
Total | Unique informational detections: 18,248 (55.53%) | 53 (9.14%)

Dates with most total detections:
critical: 2019-07-19 (15), high: 2016-09-20 (3,656), medium: 2021-04-22 (186), low: 2016-09-20 (3,781), informational: 2016-08-19 (2,105)

Top 5 computers with most unique detections:
critical: MSEDGEWIN10 (6), IEWIN7 (3), FS03.offsec.lan (2), srvdefender01.offsec.lan (2), rootdc1.offsec.lan (2)
high: MSEDGEWIN10 (117), IEWIN7 (73), FS03.offsec.lan (34), fs03vuln.offsec.lan (28), IE10Win7 (23)
medium: MSEDGEWIN10 (66), IEWIN7 (40), FS03.offsec.lan (17), IE10Win7 (15), PC01.example.corp (15)
low: MSEDGEWIN10 (35), IEWIN7 (18), FS03.offsec.lan (16), fs03vuln.offsec.lan (13), IE10Win7 (11)
informational: MSEDGEWIN10 (18), IEWIN7 (17), fs01.offsec.lan (15), PC01.example.corp (13), FS03.offsec.lan (12)

╭───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ Top critical alerts:                                              Top high alerts:                                    │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Sticky Key Like Backdoor Usage (10)                               Metasploit SMB Authentication (3,562)               │
│ Active Directory Replication from Non Machine Account (6)         Malicious Svc Possibly Installed (271)              │
│ Meterpreter or Cobalt Strike Getsystem Service Installation (6)   Susp Svc Installed (257)                            │
│ Defender Alert (Severe) (4)                                       PowerShell Scripts Installed as Services (253)      │
│ WannaCry Ransomware (4)                                           Suspicious Service Installation Script (250)        │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Top medium alerts:                                                Top low alerts:                                     │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Potentially Malicious PwSh (235)                                  Logon Failure (Wrong Password) (3,564)              │
│ Proc Injection (104)                                              Susp CmdLine (Possible LOLBIN) (1,418)              │
│ Reg Key Value Set (Sysmon Alert) (103)                            Non Interactive PowerShell (325)                    │
│ Suspicious Remote Thread Target (93)                              Rare Service Installations (321)                    │
│ Wscript Execution from Non C Drive (61)                           Windows Processes Suspicious Parent Directory (282) │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Top informational alerts:                                                                                             │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Proc Exec (11,173)                                                Explicit Logon (342)                                │
│ NetShare File Access (2,564)                                      Svc Installed (331)                                 │
│ PwSh Scriptblock (789)                                            New Non-USB PnP Device (268)                        │
│ PwSh Pipeline Exec (680)                                          Logon (Type 3 Network) (228)                        │
│ NetShare Access (433)                                             File Created (210)                                  │

fixed version

Results Summary:

Events with hits / Total events: 19,549 / 47,458 (Data reduction: 27,909 events (58.81%))

Total | Unique detections: 32,864 | 580
Total | Unique critical detections: 47 (0.14%) | 19 (3.28%)
Total | Unique high detections: 6,222 (18.93%) | 260 (44.83%)
Total | Unique medium detections: 1,566 (4.77%) | 170 (29.31%)
Total | Unique low detections: 6,781 (20.63%) | 78 (13.45%)
Total | Unique informational detections: 18,248 (55.53%) | 53 (9.14%)

Dates with most total detections:
critical: 2019-07-19 (15), high: 2016-09-20 (3,656), medium: 2021-04-22 (186), low: 2016-09-20 (3,781), informational: 2016-08-19 (2,105)

Top 5 computers with most unique detections:
critical: MSEDGEWIN10 (6), IEWIN7 (3), srvdefender01.offsec.lan (2), rootdc1.offsec.lan (2), FS03.offsec.lan (2)
high: MSEDGEWIN10 (117), IEWIN7 (73), FS03.offsec.lan (34), fs03vuln.offsec.lan (28), IE10Win7 (23)
medium: MSEDGEWIN10 (66), IEWIN7 (40), FS03.offsec.lan (17), PC01.example.corp (15), IE10Win7 (15)
low: MSEDGEWIN10 (35), IEWIN7 (18), FS03.offsec.lan (16), fs03vuln.offsec.lan (13), fs01.offsec.lan (11)
informational: MSEDGEWIN10 (18), IEWIN7 (17), fs01.offsec.lan (15), PC01.example.corp (13), IE10Win7 (12)

╭───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ Top critical alerts:                                              Top high alerts:                                    │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Sticky Key Like Backdoor Usage (10)                               Metasploit SMB Authentication (3,562)               │
│ Meterpreter or Cobalt Strike Getsystem Service Installation (6)   Malicious Svc Possibly Installed (271)              │
│ Active Directory Replication from Non Machine Account (6)         Susp Svc Installed (257)                            │
│ Defender Alert (Severe) (4)                                       PowerShell Scripts Installed as Services (253)      │
│ WannaCry Ransomware (4)                                           Suspicious Service Installation Script (250)        │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Top medium alerts:                                                Top low alerts:                                     │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Potentially Malicious PwSh (235)                                  Logon Failure (Wrong Password) (3,564)              │
│ Proc Injection (104)                                              Susp CmdLine (Possible LOLBIN) (1,418)              │
│ Reg Key Value Set (Sysmon Alert) (103)                            Non Interactive PowerShell (325)                    │
│ Suspicious Remote Thread Target (93)                              Rare Service Installations (321)                    │
│ Wscript Execution from Non C Drive (61)                           Windows Processes Suspicious Parent Directory (282) │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Top informational alerts:                                                                                             │
├╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌╌┤
│ Proc Exec (11,173)                                                Explicit Logon (342)                                │
│ NetShare File Access (2,564)                                      Svc Installed (331)                                 │
│ PwSh Scriptblock (789)                                            New Non-USB PnP Device (268)                        │
│ PwSh Pipeline Exec (680)                                          Logon (Type 3 Network) (228)                        │
│ NetShare Access (433)                                             File Created (210)                                  │

I would appreciate it if you could review🙏

closes #657

hitenkoku

@fukusuket Thank you for your pull request!
This improve is great.
LGTM

fukusuket · 2022-10-23T07:17:05Z

I also compared the speed on macOS. There seems to be no regression, but no improvement either :(

Environment

OS: macOS montery version 12.6
Hard: Macbook Air(M1, 2020) , Memory 8GB, Core 8
Data: hayabusa-sample-evtx
./hayabusa -d hayabusa-sample-evtx -o out.csv

Speed test results.

ver1.7.2
Elapsed Time: 00:00:11.764
Elapsed Time: 00:00:11.546
Elapsed Time: 00:00:11.629
fixed version
Elapsed time: 00:00:11.281
Elapsed time: 00:00:11.889
Elapsed time: 00:00:11.482

fukusuket · 2022-10-23T07:29:50Z

Unfortunately in github Actions build (windows-latest, i686-pc-windows-msvc, false) failed😭
I will check it ...

YamatoSecurity · 2022-10-23T07:36:07Z

@fukusuket sometimes cross compiling will fix it, so I set it to true.

YamatoSecurity · 2022-10-23T07:46:30Z

@fukusuket おっと。。（T_T)　残念ながらcross: trueでも駄目でした。。

fukusuket · 2022-10-23T07:58:23Z

ありがとうございます！🙇 crossオプションでもダメなのですね...涙こちらでももう少し調査いたします！

YamatoSecurity · 2022-10-23T11:37:42Z

@fukusuket Now we are using mimalloc = { version = "*", default-features = false } turning off the default secure mode for better performance but even when I compiled with mimalloc = { version = "*"} I didn't notice a slowdown. Can you check if this is the same for you? If there is no performance slowdown, I would like to use the default secure mode.

YamatoSecurity · 2022-10-23T11:38:19Z

@fukusuket Also, did you check that this correctly gets statically compiled and that it will run on systems without the VC++ Redistribution package?

fukusuket · 2022-10-23T12:39:44Z

@YamatoSecurity
I forgot the essential test in an environment without VC++ Redistribution package...😂
I'll check it along with the mimalloc = { version = "*"} test.

…er-option' into chg-vc-runtime-buildrs-to-compiler-option

fukusuket · 2022-10-23T14:00:52Z

Evidence
I confirmed that running on systems without the VC++ Redistribution package.

Environment

OS: Windows 11 Home edition (on m1 mac parallels desktop)
VC++ Redistribution package not installed.

Test3

reproduce bug in v.142 as follows.

fix version help command seccuess as follows.

fix version live-analysis command seccuess as follows.

fukusuket · 2022-10-23T14:15:29Z

@YamatoSecurity

Evidence
I compared the performance as follows. mimalloc = { version = "*"} is slightly slower ... :(
(But it's improved, so I think it's okay mimalloc = { version = "*"} )

Environment

OS: Windows 10 Home edition
Hard: Memory 16GB , Core 8, laptop
Data: hayabusa-sample-evtx

Test4

Compare the below execution speed(3 times each).
.\hayabusa.exe -d C:\tmp\hayabusa-sample-evtx -o out.csv

v172

Elapsed Time: 00:00:21.128
Elapsed Time: 00:00:20.566
Elapsed Time: 00:00:20.563

mimalloc = { version = "*"}

Elapsed time: 00:00:18.549
Elapsed time: 00:00:18.590
Elapsed time: 00:00:18.571

mimalloc = { version = "*", default-features = false }

Elapsed time: 00:00:17.363
Elapsed time: 00:00:17.330
Elapsed time: 00:00:17.217

fukusuket · 2022-10-23T14:34:26Z

Evidence
I confirmed that the 32bit exe build succeeds as follows.

Environment

OS: Windows 10 Home edition

Test5

i686 build succeeds as follows.

PS C:\Users\fukus\IdeaProjects\hayabusa> cargo clean                                                 
PS C:\Users\fukus\IdeaProjects\hayabusa> rustup run stable-i686-pc-windows-msvc cargo build --release
   Compiling autocfg v1.1.0      
   Compiling cfg-if v1.0.0       
   ...
   Compiling hayabusa v1.8.0-dev (C:\Users\fukus\IdeaProjects\hayabusa)
   Finished release [optimized] target(s) in 4m 28s

and exe is for 32bit

Sorry, Because there is no 32-bit environment, I couldn't check the actual execution...🙇

fukusuket · 2022-10-23T15:32:25Z

Evidence
I confirmed that the 32bit exe speed has not decreased.
Build with the architecture check disabled and I tested as follows.

Environment

OS: Windows 10 Home edition x64
Hard: Memory 16GB , Core 8, laptop
Data: hayabusa-sample-evtx
Hayabusa version:
- commit(before fix): 96cabd6 with comment out architecture check.
- commit(after fix): eae32e5 with comment out architecture check.

Test6

Compare the below execution speed(3 times each).
.\hayabusa.exe -d C:\tmp\hayabusa-sample-evtx -o out.csv

commit(before fix): 96cabd6a
Elapsed time: 00:00:25.062
Elapsed time: 00:00:25.127
Elapsed time: 00:00:25.181

commit(after fix): eae32e51
Elapsed time: 00:00:22.333
Elapsed time: 00:00:22.278
Elapsed time: 00:00:22.348

fukusuket · 2022-10-23T15:34:19Z

Testing in my environment is complete. I would appreciate it if you could review🙏

hitenkoku

Ok. I checked added code.
LGTM

YamatoSecurity

mimallocの設定はとても悩ましいですが、取り敢えずパフォーマンスを優先したいので、default-featuresをfalseに変えました。
PRありがとうございました！

fukusuket · 2022-10-24T01:07:27Z

パフォーマンス優先とのこと承知いたしました！　
確認したところ、本家のREADMEでも、セキュリティ有効化すると10%くらいは性能落ちると記載されていて、手元のテスト結果とだいたい一致しそうでした。
https:/microsoft/mimalloc
secure: mimalloc can be built in secure mode, adding guard pages, randomized allocation, encrypted free lists, etc. to protect against various heap vulnerabilities. The performance penalty is usually around 10% on average over our benchmarks.

fukusuket · 2022-10-24T03:37:27Z

Thank you so much for review and advice :)

fukusuket added 3 commits October 22, 2022 16:17

chg: change static link method from build.rs to compiler option

f9622d4

chg: replace static_vcruntime implementation with config.toml

42eaeaf

chg: replace global allocator with mimalloc for improve perfomance

b239e21

fukusuket changed the title ~~chg: buildrs(for vc runtime) to rustflags in config.toml and replace global memory allocator to mimalloc.~~ chg: build.rs(for vc runtime) to rustflags in config.toml and replace global memory allocator to mimalloc. Oct 23, 2022

fukusuket changed the title ~~chg: build.rs(for vc runtime) to rustflags in config.toml and replace global memory allocator to mimalloc.~~ chg: build.rs(for vc runtime) to rustflags in config.toml and replace global memory allocator with mimalloc. Oct 23, 2022

fukusuket changed the title ~~chg: build.rs(for vc runtime) to rustflags in config.toml and replace global memory allocator with mimalloc.~~ chg: build.rs(for vc runtime) to rustflags in config.toml and replace default global memory allocator with mimalloc. Oct 23, 2022

hitenkoku self-requested a review October 23, 2022 06:40

hitenkoku assigned fukusuket Oct 23, 2022

hitenkoku added this to the v1.8.0 milestone Oct 23, 2022

hitenkoku approved these changes Oct 23, 2022

View reviewed changes

hitenkoku requested a review from YamatoSecurity October 23, 2022 06:46

cross compile 32-bit windows binary

d7e025d

hitenkoku mentioned this pull request Oct 23, 2022

Improve speed test by using Mimalloc Yamato-Security/hayabusa-evtx#14

Closed

update changelog

89a7eb1

fukusuket added 3 commits October 23, 2022 22:50

fix: compile with +crt-static option when x86 arch.

b705d5b

Merge remote-tracking branch 'origin/chg-vc-runtime-buildrs-to-compil…

204cbee

…er-option' into chg-vc-runtime-buildrs-to-compiler-option

chg: enable mimalloc default-features.

eae32e5

Merge branch 'main' into chg-vc-runtime-buildrs-to-compiler-option

5132a2f

hitenkoku approved these changes Oct 24, 2022

View reviewed changes

hitenkoku added the enhancement New feature or request label Oct 24, 2022

turn off mimalloc default features

0366437

YamatoSecurity approved these changes Oct 24, 2022

View reviewed changes

YamatoSecurity merged commit 012cf33 into main Oct 24, 2022

fukusuket deleted the chg-vc-runtime-buildrs-to-compiler-option branch October 24, 2022 03:35

fukusuket added a commit that referenced this pull request Oct 24, 2022

refactor: Remove unnecessary msvcrt.lib. related #777

eb778a8

fukusuket mentioned this pull request Oct 24, 2022

refactor: Remove unnecessary msvcrt.lib #779

Merged

fukusuket mentioned this pull request Feb 18, 2023

Create developer's guide for performance enhancements #928

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chg: build.rs(for vc runtime) to rustflags in config.toml and replace default global memory allocator with mimalloc. #777

chg: build.rs(for vc runtime) to rustflags in config.toml and replace default global memory allocator with mimalloc. #777

fukusuket commented Oct 23, 2022 •

edited

Loading

hitenkoku left a comment

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022

YamatoSecurity commented Oct 23, 2022

YamatoSecurity commented Oct 23, 2022

fukusuket commented Oct 23, 2022

YamatoSecurity commented Oct 23, 2022

YamatoSecurity commented Oct 23, 2022

fukusuket commented Oct 23, 2022

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022

hitenkoku left a comment

YamatoSecurity left a comment

fukusuket commented Oct 24, 2022 •

edited

Loading

fukusuket commented Oct 24, 2022

chg: build.rs(for vc runtime) to rustflags in config.toml and replace default global memory allocator with mimalloc. #777

chg: build.rs(for vc runtime) to rustflags in config.toml and replace default global memory allocator with mimalloc. #777

Conversation

fukusuket commented Oct 23, 2022 • edited Loading

Environment

Test1

Test2

hitenkoku left a comment

Choose a reason for hiding this comment

fukusuket commented Oct 23, 2022 • edited Loading

Environment

Speed test results.

fukusuket commented Oct 23, 2022

YamatoSecurity commented Oct 23, 2022

YamatoSecurity commented Oct 23, 2022

fukusuket commented Oct 23, 2022

YamatoSecurity commented Oct 23, 2022

YamatoSecurity commented Oct 23, 2022

fukusuket commented Oct 23, 2022

fukusuket commented Oct 23, 2022 • edited Loading

Environment

Test3

fukusuket commented Oct 23, 2022 • edited Loading

Environment

Test4

fukusuket commented Oct 23, 2022 • edited Loading

Environment

Test5

fukusuket commented Oct 23, 2022 • edited Loading

Environment

Test6

fukusuket commented Oct 23, 2022

hitenkoku left a comment

Choose a reason for hiding this comment

YamatoSecurity left a comment

Choose a reason for hiding this comment

fukusuket commented Oct 24, 2022 • edited Loading

fukusuket commented Oct 24, 2022

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 23, 2022 •

edited

Loading

fukusuket commented Oct 24, 2022 •

edited

Loading