Microsoft-Windows-IME-KRAPI

Event	Title	Channel	Sample	Rule
70	EAIME_HanjaGetCandListStart	Analytic	N	N
71	EAIME_HanjaGetCandListEnd	Analytic	N	N
72	EAIME_HanjaDictLoadStart	Analytic	N	N
73	EAIME_HanjaDictLoadEnd	Analytic	N	N
74	EAIME_HanjaFinalizeCandStart	Analytic	N	N
75	EAIME_HanjaFinalizeCandEnd	Analytic	N	N
76	EAIME_HanjaConvStart	Analytic	N	N
77	EAIME_HanjaConvEnd	Analytic	N	N

Event ID 70: EAIME_HanjaGetCandListStart

Channel: Analytic
Task: TaskID:IMECandidateOpen
Opcode: Start

Event ID 71: EAIME_HanjaGetCandListEnd

Channel: Analytic
Task: TaskID:IMECandidateOpen
Opcode: Stop

Event ID 72: EAIME_HanjaDictLoadStart

Channel: Analytic
Task: TaskID:IMEKRDictLoad
Opcode: Start

Event ID 73: EAIME_HanjaDictLoadEnd

Channel: Analytic
Task: TaskID:IMEKRDictLoad
Opcode: Stop

Event ID 74: EAIME_HanjaFinalizeCandStart

Channel: Analytic
Task: TaskID:IMECandidateClose
Opcode: Start

Event ID 75: EAIME_HanjaFinalizeCandEnd

Channel: Analytic
Task: TaskID:IMECandidateClose
Opcode: Stop

Event ID 76: EAIME_HanjaConvStart

Channel: Analytic
Task: TaskID:IMEConversion
Opcode: Start

Event ID 77: EAIME_HanjaConvEnd

Channel: Analytic
Task: TaskID:IMEConversion
Opcode: Stop

Provenance

ETW provider GUID 7562948e-2671-4dda-8f8f-bf945ef984a1

Defined in imkrapi.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3451, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB