Microsoft-Windows-IME-TCCORE
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 31 | EAIME_EM_CandStart | Analytic | N | N |
| 32 | EAIME_EM_CandEnd | Analytic | N | N |
| 33 | EAIME_EM_PromptCandStart | Analytic | N | N |
| 34 | EAIME_EM_PromptCandEnd | Analytic | N | N |
| 35 | EAIME_EM_ConvStart | Analytic | N | N |
| 36 | EAIME_EM_ConvEnd | Analytic | N | N |
| 37 | EAIME_EM_TypingStart | Analytic | N | N |
| 38 | EAIME_EM_TypingEnd | Analytic | N | N |
| 51 | EAIME_LM_Decoding1Start | Analytic | N | N |
| 52 | EAIME_LM_Decoding1End | Analytic | N | N |
| 53 | EAIME_LM_LexSearchStart | Analytic | N | N |
| 54 | EAIME_LM_LexSearchEnd | Analytic | N | N |
| 55 | EAIME_LM_SearchStart | Analytic | N | N |
| 56 | EAIME_LM_SearchEnd | Analytic | N | N |
Event ID 31: EAIME_EM_CandStart
#Event ID 32: EAIME_EM_CandEnd
#Event ID 33: EAIME_EM_PromptCandStart
#Event ID 34: EAIME_EM_PromptCandEnd
#Event ID 35: EAIME_EM_ConvStart
#Event ID 36: EAIME_EM_ConvEnd
#Event ID 37: EAIME_EM_TypingStart
#Event ID 38: EAIME_EM_TypingEnd
#Event ID 51: EAIME_LM_Decoding1Start
#Event ID 52: EAIME_LM_Decoding1End
#Event ID 53: EAIME_LM_LexSearchStart
#Event ID 54: EAIME_LM_LexSearchEnd
#Event ID 55: EAIME_LM_SearchStart
#Event ID 56: EAIME_LM_SearchEnd
#Provenance
ETW provider GUID f67b2345-47fa-4721-a6fb-fe08110eecf7
Defined in imTcCore.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3451, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB