Microsoft-Windows-IME-JPAPI
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 31 | EAIME_EM_CandStart | Analytic | N | N |
| 32 | EAIME_EM_CandEnd | Analytic | N | N |
| 35 | EAIME_EM_ConvStart | Analytic | N | N |
| 36 | EAIME_EM_ConvEnd | Analytic | N | N |
| 37 | EAIME_EM_TypingStart | Analytic | N | N |
| 38 | EAIME_EM_TypingEnd | Analytic | N | N |
| 39 | EAIME_EM_GetCommentStart | Analytic | N | N |
| 40 | EAIME_EM_GetCommentEnd | Analytic | N | N |
| 41 | EAIME_EM_IMEONStart | Analytic | N | N |
| 42 | EAIME_EM_IMEONEnd | Analytic | N | N |
| 43 | EAIME_EM_DetermineStart | Analytic | N | N |
| 44 | EAIME_EM_DetermineEnd | Analytic | N | N |
| 50 | EAIME_EM_BackToReadPhraseStart | Analytic | N | N |
| 51 | EAIME_EM_BackToReadPhraseEnd | Analytic | N | N |
| 52 | EAIME_EM_BackToReadingStart | Analytic | N | N |
| 53 | EAIME_EM_BackToReadingEnd | Analytic | N | N |
| 54 | EAIME_EM_ClearAllStart | Analytic | N | N |
| 55 | EAIME_EM_ClearAllEnd | Analytic | N | N |
| 60 | EAIME_API_FELangStart | Analytic | N | N |
| 61 | EAIME_API_FELangEnd | Analytic | N | N |
| 62 | EAIME_API_FEDict_GetWordsStart | Analytic | N | N |
| 63 | EAIME_API_FEDict_GetWordsEnd | Analytic | N | N |
Event ID 31: EAIME_EM_CandStart
#Event ID 32: EAIME_EM_CandEnd
#Event ID 35: EAIME_EM_ConvStart
#Event ID 36: EAIME_EM_ConvEnd
#Event ID 37: EAIME_EM_TypingStart
#Event ID 38: EAIME_EM_TypingEnd
#Event ID 39: EAIME_EM_GetCommentStart
#Event ID 40: EAIME_EM_GetCommentEnd
#Event ID 41: EAIME_EM_IMEONStart
#Event ID 42: EAIME_EM_IMEONEnd
#Event ID 43: EAIME_EM_DetermineStart
#Event ID 44: EAIME_EM_DetermineEnd
#Event ID 50: EAIME_EM_BackToReadPhraseStart
#Event ID 51: EAIME_EM_BackToReadPhraseEnd
#Event ID 52: EAIME_EM_BackToReadingStart
#Event ID 53: EAIME_EM_BackToReadingEnd
#Event ID 54: EAIME_EM_ClearAllStart
#Event ID 55: EAIME_EM_ClearAllEnd
#Event ID 60: EAIME_API_FELangStart
#Event ID 61: EAIME_API_FELangEnd
#Event ID 62: EAIME_API_FEDict_GetWordsStart
#Event ID 63: EAIME_API_FEDict_GetWordsEnd
#Provenance
ETW provider GUID 31bcac7f-4ab8-47a1-b73a-a161ee68d585
Defined in imjpapi.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.4294, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB