Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
New resource cache built and installed on system. New cache index is 1, live cache index is 1 and config is set to 3.	3007	0		4	31	34	-9223372036854775808	26	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1384	1388	n-h1-705658-15	S-1-5-18	1/27/2021 3:25:29 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Build resource cache	MUI resource cache builder	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\timedatemuicallback.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	25	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI resource cache builder has been called with the following parameters: -m en-US .	3003	0		4	31	30	-9223372036854775808	24	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1384	1388	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	MUI resource cache builder	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\netsetupapi.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	23	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\muilanguagecleanup.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	22	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\muifontsetup.dll returned with code 512.	3002	0		4	30	31	-9223372036854775808	21	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\setbcdlocale.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	20	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification for UI Language change has been invoked with flags set to 1 and the new languages set to en-US and the previous languages set to en-US. The extended flags is set to 0	3000	0		4	30	30	-9223372036854775808	19	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageInit in c:\windows\system32\samlib.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	18	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageInit in c:\windows\system32\netsetupapi.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	17	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageInit in c:\windows\system32\muilanguagecleanup.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	16	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:38 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageInit in c:\windows\system32\muifontsetup.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	15	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:37 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification for UI Language change has been invoked with flags set to 264 and the new languages set to (null) and the previous languages set to (null). The extended flags is set to 0	3000	0		4	30	30	-9223372036854775808	14	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1292	1316	n-h1-705658-15	S-1-5-18	1/27/2021 3:24:36 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
New resource cache built and installed on system. New cache index is 0, live cache index is 0 and config is set to 3.	3007	0		4	31	34	-9223372036854775808	13	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1052	1032	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:02:25 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Build resource cache	MUI resource cache builder	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\timedatemuicallback.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	12	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI resource cache builder has been called with the following parameters: -m en-US .	3003	0		4	31	30	-9223372036854775808	11	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1052	1032	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	MUI resource cache builder	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\netsetupapi.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	10	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\muilanguagecleanup.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	9	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\muifontsetup.dll returned with code 512.	3002	0		4	30	31	-9223372036854775808	8	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageSwitch in c:\windows\system32\setbcdlocale.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	7	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification for UI Language change has been invoked with flags set to 1 and the new languages set to en-US and the previous languages set to en-US. The extended flags is set to 0	3000	0		4	30	30	-9223372036854775808	6	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageInit in c:\windows\system32\samlib.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	5	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageInit in c:\windows\system32\netsetupapi.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	4	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageInit in c:\windows\system32\muilanguagecleanup.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	3	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:01:59 PM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification callback API OnMachineUILanguageInit in c:\windows\system32\muifontsetup.dll returned with code 0.	3002	0		4	30	31	-9223372036854775808	2	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 9:01:58 AM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Invoke callback function	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MUI notification for UI Language change has been invoked with flags set to 264 and the new languages set to (null) and the previous languages set to (null). The extended flags is set to 0	3000	0		4	30	30	-9223372036854775808	1	Microsoft-Windows-MUI	a8a1f2f6-a13a-45e9-b1fe-3419569e5ef2	Microsoft-Windows-MUI/Operational	1096	1120	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 9:01:58 AM			microsoft-windows-mui/operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Start	MUI NotifyUILanguageChange task	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]