微信支付勒索病毒样本分析

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