File details
File name: onenoteim.exe
Name: Microsoft OneNote
Description: OneNote
Version: 16.0.2731.1018
Size: 1.89 MB
Original file name: OneNoteIm.exe
Digital certificate
Certificate authority:
Microsoft Corporation
Resource utilization
 | CPU utilization averages |
Total CPU: 0.0107377224%
Privileged CPU:
0.0047363364%

User CPU:
0.00600138598992%

Privileged CPU time: 468.75 ms
Privileged CPU time /min: 0 ms
CPU cycle count:
1,391,458,122
 | Memory utilization averages |
Committed memory:
395.37 MB
Peak committed memory: 423.31 MB
Paged memory:
43.69 MB
Peak paged memory: 51.64 MB
Paged system memory:
642.85 KB
Non-paged system memory: 44.41 KB
Working set memory:
27.38 MB
Peak working set memory: 130.17 MB
Min working set memory: 1.3 MB
Private memory:
43.69 MB
Page faults:
36,556
Page faults /min: 0
 | Process I/O averages |
Total read operations:
631
Total read transfer: 1 MB
Total write operations:
16
Total write transfer: 3.8 KB
Total other operations:
3,004
Total other transfer: 50.4 KB
 | GUI Object Averages |
GDI objects:
19
Peak GDI objects: 20
USER objects:
30
Peak USER objects: 38
Resources
Handle count average: 905
Thread count average: 44
Thread resource averages
shcore.dll

Total CPU: 0.013775147855%
Privileged CPU: 0.006261440359%
User CPU: 0.007513707496%
CPU Cycle count /sec: 344,806
Module memory size: 644 KB
Total CPU: 0.003754907675%
Privileged CPU: 0.003754907675%
User CPU: 0.000000000000%
CPU Cycle count /sec: 88,845
Module memory size: 1.9 MB
windows.ui.xaml.dll

Total CPU: 0.002504571133%
Privileged CPU: 0.000000000000%
User CPU: 0.002504571133%
CPU Cycle count /sec: 54,800
Module memory size: 17.69 MB
ntdll.dll

Total CPU: 0.001043789459%
Privileged CPU: 0.000313301891%
User CPU: 0.000730487568%
CPU Cycle count /sec: 30,443
Module memory size: 1.66 MB
Process details
Runs as (owner): User
Integrety level: Low
Windows platform: 64-bit
Parent Process
Process Command
"C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16.0.2731.1018_x64__8wekyb3d8bbwe\onenoteim.exe" -ServerNamC:microsoft.onenoteim.AppXxqb9ypsz6cs1w07e1pmjy4ww4dy9tpqr.mca
Image hashes
MD5: dd46a787ca3fe518384e98ff4187c172
SHA-1: f907ef75f13a79a152cad47f4717b1681f282908
PE image details
File packed: No