Application Popup

Seen on:

• Windows 2000

• Windows 2008

• Windows 7

• Windows Vista

Log source(s):	Application Popup
Log type:	System
Event message file(s):	%systemroot%\system32\ntdll.dll

 

Seen on:

• Windows 2003

• Windows XP 64-bit

Log source(s):	Application Popup
Log type:	System
Event message file(s):	%systemroot%\system32\ntdll.dll
	%systemroot%\system32\ws03res.dll

 

Seen on:

• Windows 10 (1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)

• Windows 11 (21H2)

• Windows 2012

• Windows 8.0

• Windows 8.1

Log source(s):	Application Popup
Log type:	System
Identifier:	{47bfa2b7-bd54-4fac-b70b-29021084ca8f}
Event message file(s):	%systemroot%\system32\winsrv.dll

 

Seen on:

• Windows XP 32-bit

Log source(s):	Application Popup
Log type:	System
Event message file(s):	%systemroot%\system32\ntdll.dll
	%systemroot%\system32\xpsp2res.dll