detection.wiki

Microsoft-Windows-MUI › Event 3000

Event ID 3000 — MUI notification for UI Language change has been invoked with flags set to Flags and the new languages set to NewLanguage and the previous languages set to PrevLanguage.

Provider
Microsoft-Windows-MUI
Channel
Operational
Level
Informational
Task
MUINotifyUILanguageChangetask
Opcode
Start

Description

MUI notification for UI Language change has been invoked with flags set to Flags and the new languages set to NewLanguage and the previous languages set to PrevLanguage. The extended flags is set to ExtendedFlag.

Message #

MUI notification for UI Language change has been invoked with flags set to %1 and the new languages set to %2 and the previous languages set to %3. The extended flags is set to %4

Fields #

NameDescription
Flags UInt32—
NewLanguage UnicodeString—
PrevLanguage UnicodeString—
ExtendedFlag UInt32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-MUI",
    "guid": "A8A1F2F6-A13A-45E9-B1FE-3419569E5EF2",
    "event_source_name": "",
    "event_id": 3000,
    "version": 0,
    "level": 4,
    "task": 30,
    "opcode": 30,
    "keywords": 9223372036854775808,
    "time_created": "2023-11-06T06:25:37.341209+00:00",
    "event_record_id": 21,
    "correlation": {},
    "execution": {
      "process_id": 1424,
      "thread_id": 1552
    },
    "channel": "Microsoft-Windows-MUI/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "Flags": 1,
    "NewLanguage": "en-US",
    "PrevLanguage": "en-US",
    "ExtendedFlag": 0
  },
  "message": ""
}

References #