home

ClingClang.IEUpdate.dll

Cling Clang

This is the Internet Explorer add-on for the Yontoo Cling Clang branded web browser plugin (injects banner, text-link and popup ads). The component is responisble for registering the Browser Helper Object into IE and keeping it registered. The module ClingClang.IEUpdate.dll by Cling Clang has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Cling Clang  (signed and verified)

Version:
1.0.5151.28532

MD5:
661fee5789874ba2075e4ce28d764b1b

SHA-1:
06cf8245cd7567b84b4a02e08ca337cee7d88b9c

SHA-256:
a7606e6fdbb90249d87a250ebef96cb2a06dde9c76420bcb352a59f484e652c8

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Part of the Yontoo distributed ad-supported web browser add-on for Internet Explorer.

Analysis date:
4/18/2024 7:51:38 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Yontoo.ClingClang (M)
16.2.3.4

File size:
81.8 KB (83,744 bytes)

Product version:
1.0.5151.28532

Original file name:
ClingClang.IEUpdate.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\cling clang\bin\plugins\clingclang.ieupdate.dll

Digital Signature
Signed by:
Cling Clang

Authority:
VeriSign, Inc.

Valid from:
10/6/2013 7:00:00 PM

Valid to:
10/7/2014 6:59:59 PM

Subject:
CN=Cling Clang, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cling Clang, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5D74FBB0061E5BD76029878075B12101

File PE Metadata
Compilation timestamp:
2/7/2014 10:51:11 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:W4QVmvtL5kw25jiTZ0BPa0nHKAU6IsttoujfIr+ZeIptFGZ8BCH+meGZG7UWkCHz:Wtm1L5knil09Xq83QvqZbtFGesfeMGg6

Entry address:
0x1451E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
73.5 KB (75,264 bytes)

Remove ClingClang.IEUpdate.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.