FTP Explorer v10.5.19.1 - Buffer Overflow Vulnerability

2011-07-18T00:00:00
ID VULNERLAB:110
Type vulnerlab
Reporter Vulnerability Research Laboratory
Modified 2011-07-18T00:00:00

Description

                                        
                                            Document Title:
===============
FTP Explorer v10.5.19.1 - Buffer Overflow Vulnerability



Release Date:
=============
2011-07-18


Vulnerability Laboratory ID (VL-ID):
====================================
110


Product & Service Introduction:
===============================
FTP Explorer is an FTP client application for Windows that allows you to transfer files to and from FTP servers. 
Using FTP Explorer, you can easily upload or download files to your web site or other FTP server. FTP Explorer is designed to 
make transferring files easy. FTP Explorer provides a familiar explorer-style user interface. You can transfer files using 
drag and drop between the Windows file explorer and FTP Explorer. FTP Explorer is compatible with Windows 2000, Windows XP, 
Windows Server, Windows Vista, and Windows 7.

(Copy of the Vendor Homepage: http://www.ftpx.com)


Abstract Advisory Information:
==============================
Vulnerability-Lab Team discovered a local Buffer Overflow Vulnerability on the famous FTP Explorer software for windows.


Vulnerability Disclosure Timeline:
==================================
2011-06-21:	Public or Non-Public Disclosure


Discovery Status:
=================
Published


Affected Product(s):
====================

Exploitation Technique:
=======================
Local


Severity Level:
===============
High


Technical Details & Description:
================================
A local Buffer Overflow Vulnerability is detected on FTPx. A local restricted account can escalate over the ftpx process with same process privileges. 
The Vulnerability is located on the HostMask input when adding a Profile. By passing in a long host & description string, it is possible to trigger 
a buffer overflow, resulting in the execution of arbitrary code on the local system.



Vulnerable Modules:

			[+] HostMask Config/Profile


--- Error Logs ---

Version=1
EventType=BEX                            <== PwnD!
EventTime=129160951382857746
ReportType=2
Consent=1
UploadTime=129160951387488011
ReportIdentifier=af8eac03-4b26-11df-b2ca-b3a86b9f67aa
IntegratorReportIdentifier=af8eac02-4b26-11df-b2ca-b3a86b9f67aa
WOW64=1
Response.BucketId=1102480516
Response.BucketTable=5
Response.type=4
Sig[0].Name=Anwendungsname
Sig[0].Value=ftpx.exe
Sig[1].Name=Anwendungsversion
Sig[1].Value=10.3.2.2
Sig[2].Name=Anwendungszeitstempel
Sig[2].Value=4b8dbce9
Sig[3].Name=Fehlermodulname
Sig[3].Value=ftpx.exe
Sig[4].Name=Fehlermodulversion
Sig[4].Value=10.3.2.2
Sig[5].Name=Fehlermodulzeitstempel
Sig[5].Value=4b8dbce9
Sig[6].Name=Ausnahmeoffset
Sig[6].Value=00144324
Sig[7].Name=Ausnahmecode
Sig[7].Value=c0000417
Sig[8].Name=Ausnahmedaten
Sig[8].Value=00000000
DynamicSig[1].Name=Betriebsystemversion
DynamicSig[1].Value=6.1.7600.2.0.0.768.3
DynamicSig[2].Name=Gebietsschema-ID
DynamicSig[2].Value=1031
DynamicSig[22].Name=Zusatzinformation 1
DynamicSig[22].Value=dbc8
DynamicSig[23].Name=Zusatzinformation 2
DynamicSig[23].Value=dbc8da56548f3b6b52886ac2da5229d6
DynamicSig[24].Name=Zusatzinformation 3
DynamicSig[24].Value=c08b
DynamicSig[25].Name=Zusatzinformation 4
DynamicSig[25].Value=c08b3e578713ec663c2555cd63b4659c
UI[2]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe
UI[3]=FTP Explorer funktioniert nicht mehr
UI[4]=Windows kann online nach einer Lösung für das Problem suchen.
UI[5]=Online nach einer Lösung suchen und das Programm schließen
UI[6]=Später online nach einer Lösung suchen und das Programm schließen
UI[7]=Programm schließen
LoadedModule[0]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe
LoadedModule[1]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntdll.dll
LoadedModule[2]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\kernel32.dll
LoadedModule[3]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\KERNELBASE.dll
LoadedModule[4]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\USER32.dll
LoadedModule[5]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\GDI32.dll
LoadedModule[6]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\LPK.dll
LoadedModule[7]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\USP10.dll
LoadedModule[8]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\msvcrt.dll
LoadedModule[9]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ADVAPI32.dll
LoadedModule[10]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\sechost.dll
LoadedModule[11]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RPCRT4.dll
LoadedModule[12]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SspiCli.dll
LoadedModule[13]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPTBASE.dll
LoadedModule[14]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\IMM32.DLL
LoadedModule[15]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSCTF.dll
LoadedModule[16]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ole32.dll
LoadedModule[17]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WININET.dll
LoadedModule[18]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SHLWAPI.dll
LoadedModule[19]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Normaliz.dll
LoadedModule[20]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\urlmon.dll
LoadedModule[21]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\OLEAUT32.dll
LoadedModule[22]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPT32.dll
LoadedModule[23]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSASN1.dll
LoadedModule[24]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\iertutil.dll
LoadedModule[25]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WinSxS\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\COMCTL32.dll
LoadedModule[26]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\comdlg32.dll
LoadedModule[27]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SHELL32.dll
LoadedModule[28]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CLBCatQ.DLL
LoadedModule[29]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPTSP.dll
LoadedModule[30]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\rsaenh.dll
LoadedModule[31]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RpcRtRemote.dll
LoadedModule[32]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ws2_32.dll
LoadedModule[33]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\NSI.dll
LoadedModule[34]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\inetmib1.dll
LoadedModule[35]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\IPHLPAPI.DLL
LoadedModule[36]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINNSI.DLL
LoadedModule[37]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\snmpapi.dll
LoadedModule[38]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\profapi.dll
LoadedModule[39]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\uxtheme.dll
LoadedModule[40]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Common Files\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\microsoft shared\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ink\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\tiptsf.dll
LoadedModule[41]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\version.dll
LoadedModule[42]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\dwmapi.dll
LoadedModule[43]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\oleacc.dll
LoadedModule[44]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSIMG32.dll
LoadedModule[45]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINSPOOL.DRV
LoadedModule[46]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\oledlg.dll
LoadedModule[47]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WinSxS\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\gdiplus.dll
LoadedModule[48]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINMM.dll
LoadedModule[49]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\msxml3.dll
LoadedModule[50]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\dnsapi.DLL
LoadedModule[51]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WindowsCodecs.dll
LoadedModule[52]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SETUPAPI.dll
LoadedModule[53]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CFGMGR32.dll
LoadedModule[54]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\DEVOBJ.dll
LoadedModule[55]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\propsys.dll
LoadedModule[56]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntmarta.dll
LoadedModule[57]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WLDAP32.dll
LoadedModule[58]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\apphelp.dll
LoadedModule[59]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\EhStorShell.dll
LoadedModule[60]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntshrui.dll
LoadedModule[61]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\srvcli.dll
LoadedModule[62]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\cscapi.dll
LoadedModule[63]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\slc.dll
LoadedModule[64]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RICHED20.DLL
LoadedModule[65]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FirewallAPI.dll
LoadedModule[66]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\mswsock.dll
LoadedModule[67]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\wshtcpip.dll
LoadedModule[68]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\NLAapi.dll
LoadedModule[69]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\winrnr.dll
LoadedModule[70]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\napinsp.dll
LoadedModule[71]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\pnrpnsp.dll
LoadedModule[72]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\fwpuclnt.dll
LoadedModule[73]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\rasadhlp.dll
LoadedModule[74]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SXS.DLL
State[0].Key=Transport.DoneStage1
State[0].Value=1
State[1].Key=DataRequest
State[1].Value=Bucket=1102480516/nBucketTable=5/nResponse=1/n
FriendlyEventName=Nicht mehr funktionsfähig
ConsentKey=BEX
AppName=FTP Explorer
AppPath=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe


... or

Version=1
EventType=BEX
EventTime=129162175908165941
ReportType=2
Consent=1
UploadTime=129162175911296120
ReportIdentifier=cb0f84cd-4c43-11df-b2ca-b3a86b9f67aa
IntegratorReportIdentifier=cb0f84cc-4c43-11df-b2ca-b3a86b9f67aa
WOW64=1
Response.type=4
Sig[0].Name=Anwendungsname
Sig[0].Value=ftpx.exe
Sig[1].Name=Anwendungsversion
Sig[1].Value=10.3.2.2
Sig[2].Name=Anwendungszeitstempel
Sig[2].Value=4b8dbce9
Sig[3].Name=Fehlermodulname
Sig[3].Value=ftpx.exe
Sig[4].Name=Fehlermodulversion
Sig[4].Value=10.3.2.2
Sig[5].Name=Fehlermodulzeitstempel
Sig[5].Value=4b8dbce9
Sig[6].Name=Ausnahmeoffset
Sig[6].Value=00144324
Sig[7].Name=Ausnahmecode
Sig[7].Value=c0000417
Sig[8].Name=Ausnahmedaten
Sig[8].Value=00000000
DynamicSig[1].Name=Betriebsystemversion
DynamicSig[1].Value=6.1.7600.2.0.0.768.3
DynamicSig[2].Name=Gebietsschema-ID
DynamicSig[2].Value=1031
DynamicSig[22].Name=Zusatzinformation 1
DynamicSig[22].Value=2acc
DynamicSig[23].Name=Zusatzinformation 2
DynamicSig[23].Value=2acc190a1b7082a4ce72530689299db0
DynamicSig[24].Name=Zusatzinformation 3
DynamicSig[24].Value=651b
DynamicSig[25].Name=Zusatzinformation 4
DynamicSig[25].Value=651b1ae8c444cbc875e03ffba0424560
UI[2]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe
UI[3]=FTP Explorer funktioniert nicht mehr
UI[4]=Windows kann online nach einer Lösung für das Problem suchen.
UI[5]=Online nach einer Lösung suchen und das Programm schließen
UI[6]=Später online nach einer Lösung suchen und das Programm schließen
UI[7]=Programm schließen
LoadedModule[0]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe
LoadedModule[1]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntdll.dll
LoadedModule[2]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\kernel32.dll
LoadedModule[3]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\KERNELBASE.dll
LoadedModule[4]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\USER32.dll
LoadedModule[5]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\GDI32.dll
LoadedModule[6]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\LPK.dll
LoadedModule[7]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\USP10.dll
LoadedModule[8]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\msvcrt.dll
LoadedModule[9]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ADVAPI32.dll
LoadedModule[10]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\sechost.dll
LoadedModule[11]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RPCRT4.dll
LoadedModule[12]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SspiCli.dll
LoadedModule[13]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPTBASE.dll
LoadedModule[14]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\IMM32.DLL
LoadedModule[15]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSCTF.dll
LoadedModule[16]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ole32.dll
LoadedModule[17]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WININET.dll
LoadedModule[18]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SHLWAPI.dll
LoadedModule[19]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Normaliz.dll
LoadedModule[20]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\urlmon.dll
LoadedModule[21]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\OLEAUT32.dll
LoadedModule[22]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPT32.dll
LoadedModule[23]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSASN1.dll
LoadedModule[24]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\iertutil.dll
LoadedModule[25]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WinSxS\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\COMCTL32.dll
LoadedModule[26]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\comdlg32.dll
LoadedModule[27]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SHELL32.dll
LoadedModule[28]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CLBCatQ.DLL
LoadedModule[29]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPTSP.dll
LoadedModule[30]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\rsaenh.dll
LoadedModule[31]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RpcRtRemote.dll
LoadedModule[32]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ws2_32.dll
LoadedModule[33]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\NSI.dll
LoadedModule[34]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\inetmib1.dll
LoadedModule[35]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\IPHLPAPI.DLL
LoadedModule[36]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINNSI.DLL
LoadedModule[37]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\snmpapi.dll
LoadedModule[38]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\profapi.dll
LoadedModule[39]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\uxtheme.dll
LoadedModule[40]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Common Files\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\microsoft shared\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ink\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\tiptsf.dll
LoadedModule[41]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\version.dll
LoadedModule[42]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\dwmapi.dll
LoadedModule[43]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\oleacc.dll
LoadedModule[44]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSIMG32.dll
LoadedModule[45]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINSPOOL.DRV
LoadedModule[46]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\oledlg.dll
LoadedModule[47]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WinSxS\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\gdiplus.dll
LoadedModule[48]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINMM.dll
LoadedModule[49]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\msxml3.dll
LoadedModule[50]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\dnsapi.DLL
LoadedModule[51]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WindowsCodecs.dll
LoadedModule[52]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\propsys.dll
LoadedModule[53]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SETUPAPI.dll
LoadedModule[54]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CFGMGR32.dll
LoadedModule[55]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\DEVOBJ.dll
LoadedModule[56]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntmarta.dll
LoadedModule[57]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WLDAP32.dll
LoadedModule[58]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\apphelp.dll
LoadedModule[59]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\EhStorShell.dll
LoadedModule[60]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntshrui.dll
LoadedModule[61]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\srvcli.dll
LoadedModule[62]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\cscapi.dll
LoadedModule[63]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\slc.dll
LoadedModule[64]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RICHED20.DLL
LoadedModule[65]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FirewallAPI.dll
LoadedModule[66]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SXS.DLL
LoadedModule[67]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\NLAapi.dll
LoadedModule[68]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\mswsock.dll
LoadedModule[69]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\winrnr.dll
LoadedModule[70]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\napinsp.dll
LoadedModule[71]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\pnrpnsp.dll
LoadedModule[72]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\rasadhlp.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
FriendlyEventName=Nicht mehr funktionsfähig
ConsentKey=BEX
AppName=FTP Explorer
AppPath=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe

... with 

Version=1
EventType=APPCRASH
EventTime=129162177549199803
ReportType=2
Consent=1
UploadTime=129162177552099969
ReportIdentifier=2cde55bd-4c44-11df-b2ca-b3a86b9f67aa
IntegratorReportIdentifier=2cde55bc-4c44-11df-b2ca-b3a86b9f67aa
WOW64=1
Response.BucketId=1819892726
Response.BucketTable=1
Response.type=4
Sig[0].Name=Anwendungsname
Sig[0].Value=ftpx.exe
Sig[1].Name=Anwendungsversion
Sig[1].Value=10.3.2.2
Sig[2].Name=Anwendungszeitstempel
Sig[2].Value=4b8dbce9
Sig[3].Name=Fehlermodulname
Sig[3].Value=ftpx.exe
Sig[4].Name=Fehlermodulversion
Sig[4].Value=10.3.2.2
Sig[5].Name=Fehlermodulzeitstempel
Sig[5].Value=4b8dbce9
Sig[6].Name=Ausnahmecode
Sig[6].Value=c0000005
Sig[7].Name=Ausnahmeoffset
Sig[7].Value=00144ac7
DynamicSig[1].Name=Betriebsystemversion
DynamicSig[1].Value=6.1.7600.2.0.0.768.3
DynamicSig[2].Name=Gebietsschema-ID
DynamicSig[2].Value=1031
DynamicSig[22].Name=Zusatzinformation 1
DynamicSig[22].Value=2e05
DynamicSig[23].Name=Zusatzinformation 2
DynamicSig[23].Value=2e05b3df03799b7c79e8b069d532125e
DynamicSig[24].Name=Zusatzinformation 3
DynamicSig[24].Value=e00a
DynamicSig[25].Name=Zusatzinformation 4
DynamicSig[25].Value=e00af98d3c284273cdc9867a2d97e99d
UI[2]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe
UI[3]=FTP Explorer funktioniert nicht mehr
UI[4]=Windows kann online nach einer Lösung für das Problem suchen.
UI[5]=Online nach einer Lösung suchen und das Programm schließen
UI[6]=Später online nach einer Lösung suchen und das Programm schließen
UI[7]=Programm schließen
LoadedModule[0]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe
LoadedModule[1]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntdll.dll
LoadedModule[2]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\kernel32.dll
LoadedModule[3]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\KERNELBASE.dll
LoadedModule[4]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\USER32.dll
LoadedModule[5]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\GDI32.dll
LoadedModule[6]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\LPK.dll
LoadedModule[7]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\USP10.dll
LoadedModule[8]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\msvcrt.dll
LoadedModule[9]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ADVAPI32.dll
LoadedModule[10]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\sechost.dll
LoadedModule[11]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RPCRT4.dll
LoadedModule[12]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SspiCli.dll
LoadedModule[13]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPTBASE.dll
LoadedModule[14]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\IMM32.DLL
LoadedModule[15]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSCTF.dll
LoadedModule[16]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ole32.dll
LoadedModule[17]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WININET.dll
LoadedModule[18]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SHLWAPI.dll
LoadedModule[19]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Normaliz.dll
LoadedModule[20]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\urlmon.dll
LoadedModule[21]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\OLEAUT32.dll
LoadedModule[22]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPT32.dll
LoadedModule[23]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSASN1.dll
LoadedModule[24]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\iertutil.dll
LoadedModule[25]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WinSxS\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\COMCTL32.dll
LoadedModule[26]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\comdlg32.dll
LoadedModule[27]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SHELL32.dll
LoadedModule[28]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CLBCatQ.DLL
LoadedModule[29]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CRYPTSP.dll
LoadedModule[30]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\rsaenh.dll
LoadedModule[31]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RpcRtRemote.dll
LoadedModule[32]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ws2_32.dll
LoadedModule[33]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\NSI.dll
LoadedModule[34]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\inetmib1.dll
LoadedModule[35]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\IPHLPAPI.DLL
LoadedModule[36]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINNSI.DLL
LoadedModule[37]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\snmpapi.dll
LoadedModule[38]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\profapi.dll
LoadedModule[39]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\uxtheme.dll
LoadedModule[40]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Common Files\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\microsoft shared\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ink\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\tiptsf.dll
LoadedModule[41]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\version.dll
LoadedModule[42]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\dwmapi.dll
LoadedModule[43]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\oleacc.dll
LoadedModule[44]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\MSIMG32.dll
LoadedModule[45]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINSPOOL.DRV
LoadedModule[46]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\oledlg.dll
LoadedModule[47]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WinSxS\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\gdiplus.dll
LoadedModule[48]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WINMM.dll
LoadedModule[49]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\msxml3.dll
LoadedModule[50]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\dnsapi.DLL
LoadedModule[51]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WindowsCodecs.dll
LoadedModule[52]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\propsys.dll
LoadedModule[53]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SETUPAPI.dll
LoadedModule[54]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\CFGMGR32.dll
LoadedModule[55]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\DEVOBJ.dll
LoadedModule[56]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntmarta.dll
LoadedModule[57]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\syswow64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\WLDAP32.dll
LoadedModule[58]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\apphelp.dll
LoadedModule[59]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\EhStorShell.dll
LoadedModule[60]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ntshrui.dll
LoadedModule[61]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\srvcli.dll
LoadedModule[62]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\cscapi.dll
LoadedModule[63]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\slc.dll
LoadedModule[64]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\RICHED20.DLL
LoadedModule[65]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SysWOW64\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FirewallAPI.dll
LoadedModule[66]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SXS.DLL
LoadedModule[67]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\explorerframe.dll
LoadedModule[68]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\DUser.dll
LoadedModule[69]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\DUI70.dll
LoadedModule[70]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Secur32.dll
LoadedModule[71]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\samcli.dll
LoadedModule[72]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\SAMLIB.dll
LoadedModule[73]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\netutils.dll
LoadedModule[74]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\System32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\shdocvw.dll
LoadedModule[75]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\NetworkExplorer.dll
LoadedModule[76]=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Windows\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\system32\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\LINKINFO.dll
State[0].Key=Transport.DoneStage1
State[0].Value=1
State[1].Key=DataRequest
State[1].Value=Bucket=1819892726/nBucketTable=1/nResponse=1/n
FriendlyEventName=Nicht mehr funktionsfähig
ConsentKey=APPCRASH
AppName=FTP Explorer
AppPath=C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Program Files (x86)\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\FTP Explorer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ftpx.exe




Pictures:
			../1.png
			../2.png
			../3.png


Proof of Concept (PoC):
=======================
The vulnerability can be exploited by local attackers. For demonstration or reproduce ...

Notice: Import the File to the profiles & startup the query with p0c.dat

References:
				../p0c.dat


Security Risk:
==============
The security risk of the local buffer overflow vulnerability is estimated as high.


Credits & Authors:
==================
Vulnerability Research Laboratory


Disclaimer & Information:
=========================
The information provided in this advisory is provided as it is without any warranty. Vulnerability-Lab disclaims all warranties, 
either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-
Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business 
profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some 
states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation 
may not apply. We do not approve or encourage anybody to break any vendor licenses, policies, deface websites, hack into databases 
or trade with fraud/stolen material.

Domains:    www.vulnerability-lab.com   	- www.vuln-lab.com			       - www.vulnerability-lab.com/register
Contact:    admin@vulnerability-lab.com 	- support@vulnerability-lab.com 	       - research@vulnerability-lab.com
Section:    video.vulnerability-lab.com 	- forum.vulnerability-lab.com 		       - news.vulnerability-lab.com
Social:	    twitter.com/#!/vuln_lab 		- facebook.com/VulnerabilityLab 	       - youtube.com/user/vulnerability0lab
Feeds:	    vulnerability-lab.com/rss/rss.php	- vulnerability-lab.com/rss/rss_upcoming.php   - vulnerability-lab.com/rss/rss_news.php

Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory. 
Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other 
media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, sourcecode, videos and 
other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list (feed), 
modify, use or edit our material contact (admin@vulnerability-lab.com or support@vulnerability-lab.com) to get a permission.

    				   	Copyright © 2012 | Vulnerability Laboratory