Android.Packed.22754

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Tool.SilentInstaller.1.origin
Tool.SilentInstaller.1.origin

Загружает из Интернета следующие детектируемые угрозы:

Tool.SilentInstaller.1.origin
Tool.SilentInstaller.1.origin

Сетевая активность:

Подключается к:

1####.####.123
a####.####.com
and####.####.com
api####.####.com
b####.####.com
c####.####.com
d####.####.com
i####.####.com
imgc####.####.com
m####.####.com
o####.####.com
p####.####.cn
p####.####.com
po####.####.com
qzones####.####.cn
s####.####.com
sto####.####.com
trace-####.####.com
v####.####.com

Запросы HTTP GET:

1####.####.123/gdt_mview.fcg?posw=####&posh=####&count=####&r=####&datat...
b####.####.com/app/config?os=####&key=####&sdkv=####
c####.####.com/gdt_mclick.fcg?viewid=####&jtype=####&i=####&os=####&asi=...
d####.####.com/fcg-bin/gdt_appdetail.fcg?ico=####&op_appid=####
d####.####.com/get_domains/v4/?ac=####&channel=####&aid=####&app_name=##...
i####.####.com/2/article/hot_words/?ac=####&channel=####&aid=####&app_na...
i####.####.com/large/ef700177a3c2a7feec4
i####.####.com/push/get_service_addrs/?iid=####&device_id=####&ac=####&c...
imgc####.####.com/qzone/biz/gdt/mod/android/AndroidAllInOne/proguard/his...
m####.####.com/monitor/appmonitor/v1/settings?iid=####&device_id=####&ac...
p####.####.cn/gdt/0/transformer_15739155706358679850_80.jpg/0?ck=####
p####.####.com/origin/26b90008e49258ab5dfd
qzones####.####.cn/qzone/biz/gdt/mob/sdk/v2/android02/images/tsa_ad_logo...
sto####.####.com/kepler-app/app_detail.2.309.1493891074502.zip
trace-####.####.com/localdns
v####.####.com/gdt_stats.fcg?viewid=####&i=####&os=####&gap=####

Запросы HTTP POST:

a####.####.com/app_logs
and####.####.com/rqd/async
api####.####.com/v3/log/init
d####.####.com/xs.gif?k=####&iv=####&c=####&dm=####&ac=####&s=####
o####.####.com/beacon/vercheck
o####.####.com/upload
o####.####.com/v2/get_update_time
po####.####.com/m/sys/v1
s####.####.com/msg

Изменения в файловой системе:

Создает следующие файлы:

<Package Folder>/app_Parse/installationId
<Package Folder>/app_bugly/map_record.txt
<Package Folder>/app_bugly/reg_record.txt
<Package Folder>/app_bugly/rqd_record.eup
<Package Folder>/app_bugly/tomb_1496762740100.txt
<Package Folder>/app_e_qq_com_plugin/gdt_plugin.jar
<Package Folder>/app_e_qq_com_plugin/gdt_plugin.jar.sig
<Package Folder>/app_e_qq_com_plugin/gdt_plugin.next.sig
<Package Folder>/app_e_qq_com_plugin/gdt_plugin.tmp
<Package Folder>/app_e_qq_com_plugin/update_lc
<Package Folder>/app_e_qq_com_setting/devCloudSetting.cfg
<Package Folder>/app_e_qq_com_setting/devCloudSetting.sig
<Package Folder>/app_e_qq_com_setting/gdt_suid
<Package Folder>/app_e_qq_com_setting/sdkCloudSetting.cfg
<Package Folder>/app_e_qq_com_setting/sdkCloudSetting.sig
<Package Folder>/databases/GDTSDK.db
<Package Folder>/databases/GDTSDK.db-journal
<Package Folder>/databases/ParseOfflineStore
<Package Folder>/databases/ParseOfflineStore-journal
<Package Folder>/databases/bugly_db_-journal
<Package Folder>/databases/bugly_db_legu-journal
<Package Folder>/databases/cc.db
<Package Folder>/databases/cc.db-journal
<Package Folder>/databases/ua.db
<Package Folder>/databases/ua.db-journal
<Package Folder>/files/####/exchangeIdentity.json
<Package Folder>/files/.imprint
<Package Folder>/files/beacontsa_cover_check.lock
<Package Folder>/files/exid.dat
<Package Folder>/files/local_crash_lock
<Package Folder>/files/native_record_lock
<Package Folder>/files/native_record_lock (deleted)
<Package Folder>/files/security_info
<Package Folder>/files/target.apk
<Package Folder>/shared_prefs/<Package>.BETA_VALUES.xml
<Package Folder>/shared_prefs/beacontsa_cover.xml
<Package Folder>/shared_prefs/crashrecord.xml
<Package Folder>/shared_prefs/umeng_general_config.xml
<Package Folder>/shared_prefs/umeng_general_config.xml.bak
<Package Folder>/tx_shell/libshella-2.10.3.1.so
<Package Folder>/tx_shell/libufix.so
<Package Folder>/virtual/####/.imprint
<Package Folder>/virtual/####/0.xml
<Package Folder>/virtual/####/0nfFGidrHZlbgeFLKOt249Yt4vc.-749021441.tmp
<Package Folder>/virtual/####/18e3aac2b765a3f22b750d90eac0a044.0.tmp
<Package Folder>/virtual/####/18e3aac2b765a3f22b750d90eac0a044.1.tmp
<Package Folder>/virtual/####/34f0b59288a59cc3ce000f54a8708809.0.tmp
<Package Folder>/virtual/####/34f0b59288a59cc3ce000f54a8708809.1.tmp
<Package Folder>/virtual/####/68OgwRj3ohU2QnojrUOkMV8Jamw.561749539.tmp
<Package Folder>/virtual/####/Alvin2.xml
<Package Folder>/virtual/####/ContextData.xml
<Package Folder>/virtual/####/MessageStore.db-journal
<Package Folder>/virtual/####/MsgLogStore.db-journal
<Package Folder>/virtual/####/Play@2x.png
<Package Folder>/virtual/####/Play@3x.png
<Package Folder>/virtual/####/Play_night@2x.png
<Package Folder>/virtual/####/Play_night@3x.png
<Package Folder>/virtual/####/RbLnVh9gRpbqnxO0879gDn4l5EY.-533819842.tmp
<Package Folder>/virtual/####/__Baidu_Stat_SDK_SendRem.xml
<Package Folder>/virtual/####/__local_ap_info_cache.json
<Package Folder>/virtual/####/__local_stat_cache.json
<Package Folder>/virtual/####/_andfix_.xml
<Package Folder>/virtual/####/account-list.ini
<Package Folder>/virtual/####/android.css
<Package Folder>/virtual/####/android.js
<Package Folder>/virtual/####/android.js.dat
<Package Folder>/virtual/####/app_log_encrypt_switch_count.xml
<Package Folder>/virtual/####/app_setting.xml
<Package Folder>/virtual/####/app_track.xml
<Package Folder>/virtual/####/applog_stats.xml
<Package Folder>/virtual/####/article.db
<Package Folder>/virtual/####/article.db-journal
<Package Folder>/virtual/####/auth_shared.xml
<Package Folder>/virtual/####/base.apk
<Package Folder>/virtual/####/base.apk.classes-1327431832.zip
<Package Folder>/virtual/####/base.apk.classes2076960919.zip
<Package Folder>/virtual/####/chVzVJGXU_eJj7ayZGkpL59mM28.485025021.tmp
<Package Folder>/virtual/####/com.ss.spipe_setting.xml
<Package Folder>/virtual/####/custom_channels.xml
<Package Folder>/virtual/####/data@app@com.ss.android.article.news-1@base.apk@classes.dex
<Package Folder>/virtual/####/detect.js.dat
<Package Folder>/virtual/####/device_id.xml.xml
<Package Folder>/virtual/####/deviceid_prefs.xml
<Package Folder>/virtual/####/ea3d8deea240e094cfd95f290d5b8b11.0.tmp
<Package Folder>/virtual/####/ea3d8deea240e094cfd95f290d5b8b11.1.tmp
<Package Folder>/virtual/####/feedback.db-journal
<Package Folder>/virtual/####/follow_guide.png
<Package Folder>/virtual/####/forum.css
<Package Folder>/virtual/####/gIAWOTMLLzpIgbJs6n57bXg2g-A.-76750271.tmp
<Package Folder>/virtual/####/gificon_textpage@2x.png
<Package Folder>/virtual/####/gificon_textpage_night@2x.png
<Package Folder>/virtual/####/hijack_html_black_list_table.xml
<Package Folder>/virtual/####/hijack_info.xml
<Package Folder>/virtual/####/hijack_temp.json
<Package Folder>/virtual/####/iconfont.ttf
<Package Folder>/virtual/####/iejElIyuXwn29QDG6tv_1yI4wOw.2122833130.tmp
<Package Folder>/virtual/####/image_bg_click.png
<Package Folder>/virtual/####/image_bg_click_night.png
<Package Folder>/virtual/####/image_bg_loading.png
<Package Folder>/virtual/####/image_bg_loading_night.png
<Package Folder>/virtual/####/imei.xml
<Package Folder>/virtual/####/journal.tmp
<Package Folder>/virtual/####/last_know_location.xml
<Package Folder>/virtual/####/lib.js
<Package Folder>/virtual/####/lib_log_queue.db-journal
<Package Folder>/virtual/####/libcuid.so
<Package Folder>/virtual/####/load_dex.tmp
<Package Folder>/virtual/####/main_app_settings.xml
<Package Folder>/virtual/####/mipush.xml
<Package Folder>/virtual/####/mipush.xml.bak
<Package Folder>/virtual/####/mipush_extra.xml
<Package Folder>/virtual/####/misc_config.xml
<Package Folder>/virtual/####/mobclick_agent_cached_com.ss.android.article.news593
<Package Folder>/virtual/####/mobclick_agent_online_setting_com.ss.android.article.news.xml
<Package Folder>/virtual/####/monitor_config.xml
<Package Folder>/virtual/####/multi_process_config.xml
<Package Folder>/virtual/####/multidex.version.xml
<Package Folder>/virtual/####/musicplayer_states@3x.png
<Package Folder>/virtual/####/musicplayer_states_night@3x.png
<Package Folder>/virtual/####/nKaJkwwZlu_2z_b7G5q-a7mBCHk.-2049859544.tmp
<Package Folder>/virtual/####/package.ini
<Package Folder>/virtual/####/packages.ini
<Package Folder>/virtual/####/picture_details@2x.png
<Package Folder>/virtual/####/picture_details_night@2x.png
<Package Folder>/virtual/####/plugin_update_info.xml
<Package Folder>/virtual/####/pre_control.xml
<Package Folder>/virtual/####/push_setting.xml
<Package Folder>/virtual/####/save_ma_init_commoninfo.xml
<Package Folder>/virtual/####/signature.ini
<Package Folder>/virtual/####/snssdk_openudid.xml
<Package Folder>/virtual/####/spinner.png
<Package Folder>/virtual/####/spinner_night.png
<Package Folder>/virtual/####/ss_app_config.xml
<Package Folder>/virtual/####/ss_app_log.db-journal
<Package Folder>/virtual/####/ss_app_monitor.db-journal
<Package Folder>/virtual/####/ss_location.xml
<Package Folder>/virtual/####/ss_monitor_trace-trace_file_1tt-trace.trace
<Package Folder>/virtual/####/ss_plugin.json
<Package Folder>/virtual/####/ss_push_log.db
<Package Folder>/virtual/####/ss_push_log.db-journal
<Package Folder>/virtual/####/ss_refresh_ad.xml
<Package Folder>/virtual/####/ss_splash_ad.xml
<Package Folder>/virtual/####/tempimage-1327431832.tmp
<Package Folder>/virtual/####/tempimage-1601512357.tmp
<Package Folder>/virtual/####/tempimage-1935005219.tmp
<Package Folder>/virtual/####/tempimage1942454767.tmp
<Package Folder>/virtual/####/tmp.Fh3017
<Package Folder>/virtual/####/tmp.Jd3017
<Package Folder>/virtual/####/tmp.Ji3017
<Package Folder>/virtual/####/tmp.RQ3017
<Package Folder>/virtual/####/tmp.af3017
<Package Folder>/virtual/####/tmp.en3017
<Package Folder>/virtual/####/tmp.ex3017
<Package Folder>/virtual/####/tmp.kB3017
<Package Folder>/virtual/####/tmp.mV3017
<Package Folder>/virtual/####/tmp.nN3017
<Package Folder>/virtual/####/tmp.nn3017
<Package Folder>/virtual/####/tmp.nq3017
<Package Folder>/virtual/####/tmp.qr3017
<Package Folder>/virtual/####/tmp.yB3017
<Package Folder>/virtual/####/toast_keywords_refresh_gray@2x.png
<Package Folder>/virtual/####/toast_keywords_refresh_gray@3x.png
<Package Folder>/virtual/####/toast_keywords_refresh_white@2x.png
<Package Folder>/virtual/####/toast_keywords_refresh_white@3x.png
<Package Folder>/virtual/####/traffic_monitor_info.xml
<Package Folder>/virtual/####/uCO0BIOjiQOakGfpMTooMn10AqQ.-757957919.tmp
<Package Folder>/virtual/####/uid-list.ini
<Package Folder>/virtual/####/umeng_general_config.xml
<Package Folder>/virtual/####/umeng_it.cache
<Package Folder>/virtual/####/userlist.xml
<Package Folder>/virtual/####/webview.db-journal
<Package Folder>/virtual/####/webviewCookiesChromium.db-journal
<Package Folder>/virtual/####/webviewCookiesChromium.db-journal (deleted)
<SD-Card>/.DataStorage/ContextData.xml
<SD-Card>/.UTSystemConfig/####/Alvin2.xml
<SD-Card>/Android/####/.nomedia
<SD-Card>/Android/####/10cd652b7dcfd7dc1eda30a6f77cb578.dat
<SD-Card>/Android/####/5bd56962b9a347ca82c1236688bb5c39.dat
<SD-Card>/Android/####/96224bcdef9e3a835cfbfaf6819c98a2.dat
<SD-Card>/Android/####/983e95a86c31fffdabf983c00250f21a.dat
<SD-Card>/Android/####/_mod_hd_bar.s.min.css
<SD-Card>/Android/####/_mod_search_filter_layer.s.min.css
<SD-Card>/Android/####/_mod_search_panel_v2.s.min.css
<SD-Card>/Android/####/a84df58abd6520d200ec95afa3a729ce.tmp
<SD-Card>/Android/####/ajax.js
<SD-Card>/Android/####/app_cart.3.224.1483500645938.zip
<SD-Card>/Android/####/app_detail.2.309.1493891074502.zip
<SD-Card>/Android/####/app_nav.1.13.1462514113396.zip
<SD-Card>/Android/####/app_trade.1.254.1484871867974.zip
<SD-Card>/Android/####/area_select.s.min.css
<SD-Card>/Android/####/b55b7f074dee760b8e48464e2c30e98d.dat
<SD-Card>/Android/####/backbone.js
<SD-Card>/Android/####/bada96abf92656d6ff9273941a94aee9.dat
<SD-Card>/Android/####/base.s.min.css
<SD-Card>/Android/####/buy.s.min.css
<SD-Card>/Android/####/cart.min.css
<SD-Card>/Android/####/cartStatic.html
<SD-Card>/Android/####/category.s.min.css
<SD-Card>/Android/####/clientudid.dat
<SD-Card>/Android/####/com.ss.ijkplayer.jar
<SD-Card>/Android/####/common.js
<SD-Card>/Android/####/cookie.201505071822.js
<SD-Card>/Android/####/cookie.js
<SD-Card>/Android/####/date.js
<SD-Card>/Android/####/detail.s.min.css
<SD-Card>/Android/####/detail_v1_3.png
<SD-Card>/Android/####/fastclick-mping-monitor-iscroll-template.min.js
<SD-Card>/Android/####/fastclick.js
<SD-Card>/Android/####/feedback_tips.png
<SD-Card>/Android/####/formatJson.201505071823.js
<SD-Card>/Android/####/formatJson.js
<SD-Card>/Android/####/icon_captcha.png
<SD-Card>/Android/####/icon_global.png
<SD-Card>/Android/####/icon_nav_v2.png
<SD-Card>/Android/####/icon_result.png
<SD-Card>/Android/####/icon_select.png
<SD-Card>/Android/####/icon_tips.png
<SD-Card>/Android/####/index_114009134.jpg
<SD-Card>/Android/####/inf.js
<SD-Card>/Android/####/init.png
<SD-Card>/Android/####/iscroll-mping-monitor.js
<SD-Card>/Android/####/iscroll.201505131224.js
<SD-Card>/Android/####/item.min.css
<SD-Card>/Android/####/itemStatic.html
<SD-Card>/Android/####/jd.address.201504241030.js
<SD-Card>/Android/####/jd.address.js
<SD-Card>/Android/####/jd.promotions.js
<SD-Card>/Android/####/jd.search.common.201510121131.js
<SD-Card>/Android/####/jd.searchV2.js
<SD-Card>/Android/####/jd.searchindexV2.js
<SD-Card>/Android/####/jd.smartbox.min.js
<SD-Card>/Android/####/journal
<SD-Card>/Android/####/journal.tmp
<SD-Card>/Android/####/jsapi.js
<SD-Card>/Android/####/loadJs.201505111110.js
<SD-Card>/Android/####/loadJs.js
<SD-Card>/Android/####/loading.gif
<SD-Card>/Android/####/login.js
<SD-Card>/Android/####/loopScroll.js
<SD-Card>/Android/####/m_close.png
<SD-Card>/Android/####/md5.js
<SD-Card>/Android/####/metadata.xml
<SD-Card>/Android/####/mod_aside.s.min.css
<SD-Card>/Android/####/mod_bar_download.s.min.css
<SD-Card>/Android/####/mod_nav_head.s.min.css
<SD-Card>/Android/####/monitor.js
<SD-Card>/Android/####/mping-monitor.min.js
<SD-Card>/Android/####/mqqStorage.201507151518.js
<SD-Card>/Android/####/myViewWithCache.js
<SD-Card>/Android/####/nav.html
<SD-Card>/Android/####/pay.js
<SD-Card>/Android/####/payutil.js
<SD-Card>/Android/####/q.js
<SD-Card>/Android/####/qqAddr.js
<SD-Card>/Android/####/qrcode.js
<SD-Card>/Android/####/report.201507281703.js
<SD-Card>/Android/####/report.js
<SD-Card>/Android/####/s_detail_loc.js
<SD-Card>/Android/####/scrollCtrl.js
<SD-Card>/Android/####/sea.js
<SD-Card>/Android/####/search.html
<SD-Card>/Android/####/search_v2.s.min.css
<SD-Card>/Android/####/select_loading.gif
<SD-Card>/Android/####/speedtime.201507091141.js
<SD-Card>/Android/####/sprites_v3.png
<SD-Card>/Android/####/swiper.min.js
<SD-Card>/Android/####/tempimage-1689157901.tmp
<SD-Card>/Android/####/tempimage-1938500383.tmp
<SD-Card>/Android/####/tempimage-566072590.tmp
<SD-Card>/Android/####/tempimage1934441360.tmp
<SD-Card>/Android/####/tempimage2076960919.tmp
<SD-Card>/Android/####/tempimage2076960919.tmp (deleted)
<SD-Card>/Android/####/tempimage762501236.tmp
<SD-Card>/Android/####/template.js
<SD-Card>/Android/####/tpl_s_detail_loc.js
<SD-Card>/Android/####/tpl_wq.asset.js
<SD-Card>/Android/####/tpl_wq.confirm1.js
<SD-Card>/Android/####/tpl_wq.jdaddress.js
<SD-Card>/Android/####/trade.min.css
<SD-Card>/Android/####/tradeViewStatic.html
<SD-Card>/Android/####/ui.201507281615.js
<SD-Card>/Android/####/ui.js
<SD-Card>/Android/####/underscore.js
<SD-Card>/Android/####/underscore.min.js
<SD-Card>/Android/####/unionclick.js
<SD-Card>/Android/####/url.201505111643.js
<SD-Card>/Android/####/url.js
<SD-Card>/Android/####/util.201508201549.js
<SD-Card>/Android/####/util.js
<SD-Card>/Android/####/wg.addrctrl.js
<SD-Card>/Android/####/wg.addrctrl.view.js
<SD-Card>/Android/####/wg.countRd.js
<SD-Card>/Android/####/wg.itemV6.js
<SD-Card>/Android/####/wg.jdgift.view.js
<SD-Card>/Android/####/wg.jdpromote.js
<SD-Card>/Android/####/wg.jdshopcart.js
<SD-Card>/Android/####/wg.jdshopcart.model.js
<SD-Card>/Android/####/wg.mobilereport.min.js
<SD-Card>/Android/####/wg.mwfoot.min.js
<SD-Card>/Android/####/wg.qqapi.min.js
<SD-Card>/Android/####/wg.report.min.js
<SD-Card>/Android/####/wg.speedtime.js
<SD-Card>/Android/####/wg.storage.min.js
<SD-Card>/Android/####/wq.asset.js
<SD-Card>/Android/####/wq.confirm1.js
<SD-Card>/Android/####/wq.jdaddress.js
<SD-Card>/Android/####/wq.search.category.js
<SD-Card>/Android/####/zepto.201509161730.js
<SD-Card>/Android/####/zepto.js
<SD-Card>/Android/####/zepto.min.js
<SD-Card>/Android/####/~$emStatic.html
<SD-Card>/backups/####/.confd
<SD-Card>/backups/####/.confd-journal
<SD-Card>/backups/####/.cuid
<SD-Card>/backups/####/.cuid2
<SD-Card>/backups/####/.timestamp

Другие:

Запускает следующие shell-скрипты:

/data/user/0/com.ss.android.article.news.h/virtual/data/user/0/com.ss.android.article.news/lib/libsupervisor.so com.ss.android.article.news com.ss.android.message.NotifyService com.ss.android.article.news:push /data/user/0/com.ss.android.article.news.h/virtual/data/user/0/com.ss.android.article.news 0
/system/bin/sh -c getprop
/system/bin/sh -c getprop ro.aa.romver
/system/bin/sh -c getprop ro.board.platform
/system/bin/sh -c getprop ro.build.fingerprint
/system/bin/sh -c getprop ro.build.nubia.rom.name
/system/bin/sh -c getprop ro.build.rom.id
/system/bin/sh -c getprop ro.build.tyd.kbstyle_version
/system/bin/sh -c getprop ro.build.version.emui
/system/bin/sh -c getprop ro.build.version.opporom
/system/bin/sh -c getprop ro.gn.gnromvernumber
/system/bin/sh -c getprop ro.lenovo.series
/system/bin/sh -c getprop ro.lewa.version
/system/bin/sh -c getprop ro.meizu.product.model
/system/bin/sh -c getprop ro.miui.ui.version.name
/system/bin/sh -c getprop ro.vivo.os.build.display.id
/system/bin/sh -c type su
<dexopt>
chmod 700 /data/data/com.ss.android.article.news.h/tx_shell/libnfix.so
chmod 700 /data/data/com.ss.android.article.news.h/tx_shell/libshella-2.10.3.1.so
chmod 700 /data/data/com.ss.android.article.news.h/tx_shell/libufix.so
chmod 700 /data/user/0/<Package>/tx_shell/libnfix.so
chmod 700 /data/user/0/<Package>/tx_shell/libshella-2.10.3.1.so
chmod 700 /data/user/0/<Package>/tx_shell/libufix.so
chmod 700 /data/user/0/com.ss.android.article.news.h/tx_shell/libnfix.so
chmod 700 /data/user/0/com.ss.android.article.news.h/tx_shell/libshella-2.10.3.1.so
chmod 700 /data/user/0/com.ss.android.article.news.h/tx_shell/libufix.so
chmod 700 <Package Folder>/tx_shell/libnfix.so
chmod 700 <Package Folder>/tx_shell/libshella-2.10.3.1.so
chmod 700 <Package Folder>/tx_shell/libufix.so
getprop
getprop persist.vivo.multiwindow
getprop persist.vivo.multiwindow_active
getprop ro.aa.romver
getprop ro.board.platform
getprop ro.build.fingerprint
getprop ro.build.nubia.rom.name
getprop ro.build.rom.id
getprop ro.build.tyd.kbstyle_version
getprop ro.build.version.emui
getprop ro.build.version.opporom
getprop ro.gn.gnromvernumber
getprop ro.lenovo.series
getprop ro.lewa.version
getprop ro.meizu.product.model
getprop ro.miui.ui.version.name
getprop ro.vivo.os.build.display.id
getprop ro.yunos.version
logcat -d -v threadtime
logcat -d -v threadtime Bugly-libunwind:S

Использует специальную библиотеку для скрытия исполняемого байткода.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней