Should I block it?

No, this file is 100% safe to run.

Relationships

Parent process
Related files

OneNoteIm.exe

Microsoft OneNote by Microsoft Corporation (Signed)

Remove OneNoteIm.exe
Version:   16.0.2731.1018
MD5:   dd46a787ca3fe518384e98ff4187c172
SHA1:   f907ef75f13a79a152cad47f4717b1681f282908

Overview

onenoteim.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). The file is digitally signed by Microsoft Corporation. This particular version is usually found on Windows 8.1 Single Language (6.2.9200.0).

DetailsDetails

File name:onenoteim.exe
Publisher:Microsoft Corporation
Product name:Microsoft OneNote
Description:OneNote
Typical file path:C:\Program Files\windowsapps\microsoft.office.onenote_16.0.2731.1018_x64__8wekyb3d8bbwe\onenoteim.exe
File version:16.0.2731.1018
Size:1.89 MB (1,983,120 bytes)
Build date:6/6/2014 4:34 PM
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.01073772%
0.028634%
Kernel CPU:0.00473634%
0.013761%
User CPU:0.00600139%
0.014873%
Kernel CPU time:469 ms/min
100,923,805ms/min
Memory
Private memory:43.69 MB
21.59 MB
Private (maximum):35.66 MB
Private (minimum):1.3 MB
Non-paged memory:43.69 MB
21.59 MB
Virtual memory:395.37 MB
140.96 MB
Virtual memory (peak):423.31 MB
169.69 MB
Working set:27.38 MB
18.61 MB
Working set (peak):130.17 MB
37.95 MB
Resource allocations
Threads:44
12
Handles:905
600
GUI GDI count:19
103
GUI GDI peak:20
142
GUI USER count:30
49
GUI USER peak:38
71

BehaviorsProcess properties

Integrety level:Low
Platform:64-bit
Command line:"C:\Program Files\windowsapps\microsoft.office.onenote_16.0.2731.1018_x64__8wekyb3d8bbwe\onenoteim.exe" -servernamC:microsoft.onenoteim.appxxqb9ypsz6cs1w07e1pmjy4ww4dy9tpqr.mca
Owner:User
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
shcore.dll
Total CPU:0.01377515%
0.272967%
Kernel CPU:0.00626144%
0.107585%
User CPU:0.00751371%
0.165382%
CPU cycles:344,806/sec
5,741,424/sec
Memory:644 KB
1.16 MB
onenoteim.exe (main module)
Total CPU:0.00375491%
Kernel CPU:0.00375491%
User CPU:0.00000000%
CPU cycles:88,845/sec
Memory:1.9 MB
Windows.UI.Xaml.dll
Total CPU:0.00250457%
Kernel CPU:0.00000000%
User CPU:0.00250457%
CPU cycles:54,800/sec
Memory:17.69 MB
ntdll.dll
Total CPU:0.00104379%
Kernel CPU:0.00031330%
User CPU:0.00073049%
CPU cycles:30,443/sec
Memory:1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8.1 Single Language 100.00%

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 100.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE