IS KMS PICO AUTHORIZED? EXPLORING THE LEGITIMACY OF ACTIVATION APPLICATIONS