一款伪装成Windows激活工具的在野恶意软件分析

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