"ucmapi.exe" Process on Windows 7

Q

What is the "ucmapi.exe" process on windows 7? Is the "ucmapi.exe" process a virus? Can I terminate the "ucmapi.exe" process?

✍: FYIcenter.com

A

"ucmapi.exe" process represents "Skype for Business" program. "ucmapi.exe" process seems to be created a by service.

"ucmapi.exe" process is normally running under the parent process "svchost" as shown in the process tree below:

Boot
   wininit
      services
         svchost
            ucmapi

On the Processes tab of "Task Manager", "ucmapi.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
ucmapi.exe               31,992 K   Skype for Business

Additional information about "ucmapi.exe" process:

Command line:
   "C:\Program Files\Microsoft Office 15\Root\Office15\UcMapi.exe" -Embedding

Programe file information:
   Name: ucmapi.exe
   Location: C:\Program Files\Microsoft Office 15\Root\Office15\UcMapi.exe
   Description: Skype for Business
   Version: 15.0.4885.1000
   Size: 920776 bytes
   Last modified: 11/15/2016 5:20:02 AM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows
C:\Windows\SysWOW64
C:\ProgramData\Microsoft\Office\ClickToRunPackageLocker
C:\Users\fyicenter\AppData\Local\Microsoft\Outlook\gliding

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale
HKLM\SOFTWARE\Microsoft\Office\15.0\ClickToRun
HKCU\Software\Microsoft\Tracing\UcClient\UCMAPI15\TC_TELEMETRY
HKCU\Software\Microsoft\Tracing\UcClient\UCMAPI15\TC_UCMP
HKCU\Software\Microsoft\Tracing\UcClient\UCMAPI15\TC_SKYPE_CAST
HKCU\Software\Microsoft\Tracing\UcClient\UCMAPI15\TC_ALERTS

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\SYSTEM32\wow64.dll
C:\windows\SYSTEM32\wow64win.dll
C:\windows\SYSTEM32\wow64cpu.dll
C:\Program Files\Microsoft Office 15\Root\Office15\UcMapi.exe
C:\windows\SysWOW64\ntdll.dll
C:\windows\syswow64\kernel32.dll
C:\windows\syswow64\KERNELBASE.dll
C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvSubsystems32.dll
C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvStream32.dll

"ucmapi.exe" process is not a virus. But you can terminate "ucmapi.exe" process. You can run Skype for Business whenever you need it.

 

Application Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials

2017-01-21, 351👍, 0💬