detection.wiki

Microsoft-Windows-IME-JPSetting

EventTitleChannelSampleRule
1EAIME_ShowSettingStartAnalyticNN
2EAIME_ShowSettingEndAnalyticNN

Event ID 1: EAIME_ShowSettingStart

#
Channel
Analytic
Task
TaskID:ShowsettingUI
Opcode
Start

Event ID 2: EAIME_ShowSettingEnd

#
Channel
Analytic
Task
TaskID:ShowsettingUI
Opcode
Stop

Provenance

ETW provider GUID 14371053-1813-471a-9510-1cf1d0a055a8

Defined in IMJPSET.exe, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3692, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.4061, captured 2026-06-02 — Manifest XML pack, 2.0 MB