Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.21%
6.2.9200.16384 (win8_rtm.120725-1247)	6.85%
6.2.9200.16384 (win8_rtm.120725-1247)	1.21%
6.1.7600.16385 (win7_rtm.090713-1255)	0.40%
6.1.7600.16385 (win7_rtm.090713-1255)	43.15%
6.1.7600.16385 (win7_rtm.090713-1255)	27.02%
6.1.7600.16385 (win7_rtm.090713-1255)	2.02%
6.0.6000.16386 (vista_rtm.061101-2205)	6.85%
5.1.2600.5512 (xpsp.080413-0852)	10.48%
5.1.2600.5512 (xpsp.080413-0852)	0.40%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.40%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, RegEnumKeyW, RegOpenKeyExW, RegisterEventSourceA, ReportEventA, DeregisterEventSource, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, RegEnumValueA, RegQueryValueExA, RegNotifyChangeKeyValue, RegOpenKeyExA, RegEnumValueW, RegCloseKey, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegCreateKeyExA, LookupPrivilegeNameW, GetTokenInformation, AdjustTokenPrivileges, OpenProcessToken

kernel32.dll

UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, SetUnhandledExceptionFilter, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, GetModuleHandleA, SetEvent, Sleep, LeaveCriticalSection, EnterCriticalSection, ResumeThread, GetTickCount, MultiByteToWideChar, SetConsoleCtrlHandler, WaitForSingleObjectEx, CreateThread, DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, GetProcAddress, LoadLibraryExA, GetSystemTimeAsFileTime, HeapCreate, HeapDestroy, HeapAlloc, HeapFree, CloseHandle, CreateEventA, lstrcmpiA, WaitForMultipleObjects, ExpandEnvironmentStringsA, GetLastError, FreeLibrary, CompareStringA, RegisterApplicationRestart, GetCommandLineW, HeapSetInformation, lstrcmpiW, UnmapViewOfFile, CreateMutexW, CreateEventW, ReleaseMutex, MapViewOfFile, CreateFileMappingW, ResetEvent, Wow64EnableWow64FsRedirection, GetSystemWow64DirectoryA, GetSystemDirectoryA, LoadLibraryW, IsWow64Process, InterlockedCompareExchange, InterlockedExchange

msvcrt.dll

DllMain

snmpapi.dll

SnmpUtilMemReAlloc, SnmpSvcInitUptime, SnmpUtilUnicodeToUTF8, SnmpSvcGetUptime, SnmpUtilAsnAnyCpy, SnmpSvcAddrToSocket, SnmpSvcGetEnterpriseOID, SnmpUtilOidNCmp, SnmpUtilOidCmp, SnmpUtilVarBindFree, SnmpUtilOidFree, SnmpUtilOidCpy, SnmpUtilVarBindCpy, SnmpUtilVarBindListFree, SnmpUtilMemAlloc, SnmpUtilOctetsCmp, SnmpUtilOctetsFree, SnmpSvcSetLogLevel, SnmpSvcSetLogType, SnmpUtilMemFree, SnmpUtilVarBindListCpy, SnmpUtilAnsiToUnicode

ws2_32.dll

WSASocketA, WSASendTo, WSARecvFrom, WSAIoctl, WSASendMsg, freeaddrinfo, getaddrinfo

snmp.exe

SNMP Service by Microsoft

Remove snmp.exe

Version:	6.2.9200.16384 (win8_rtm.120725-1247)
MD5:	6f4dfe31662093ed3ca5c0d7a15003a6
SHA1:	beff81fbc1d35400e878adaaca7f488cc7711728
SHA256:	d3e97b9dac43f7a49ee7ae8ef54b21ee30a3fdc488fb79818131e6df82640929

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is snmp.exe?

Simple Network Management Protocol (SNMP) is an Internet-standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations and printers. SNMP exposes management data in the form of variables on the managed systems, which describe the system configuration. These variables can then be queried by managing applications.

About snmp.exe (from Microsoft)

“SNMP provides the ability to send traps, or notifications, to advise an administrator when one or more conditions have been met. Traps are network packets that contain data relating to a component of ”

Details

File name:	snmp.exe
Publisher:	Microsoft Corporation
Product name:	SNMP Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\snmp.exe
Original name:	snmp.exe.mui
File version:	6.2.9200.16384 (win8_rtm.120725-1247)
Product version:	6.2.9200.16384
Size:	44 KB (45,056 bytes)
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'SNMP' (Servicio SNMP)

Network connections

[UDP] listens on port 161

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00375324%	0.028634%
Kernel CPU:	0.00301172%	0.013761%
User CPU:	0.00074152%	0.014873%
Kernel CPU time:	20,631 ms/min	100,923,805ms/min
Context switches:	47/sec	284/sec
Memory
Private memory:	2.67 MB	21.59 MB
Private (maximum):	6.52 MB
Private (minimum):	3.08 MB
Non-paged memory:	2.67 MB	21.59 MB
Virtual memory:	44.66 MB	140.96 MB
Virtual memory (peak):	53.68 MB	169.69 MB
Working set:	3.48 MB	18.61 MB
Working set (peak):	8.22 MB	37.95 MB
Resource allocations
Threads:	6	12
Handles:	209	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	C:\Windows\System32\snmp.exe
Owner:	SYSTEM
Windows Service
Service name:	SNMP
Display name:	Servicio SNMP
Description:	“Habilita las solicitudes del protocolo simple de administración de redes (SNMP) que se van a procesar en este equipo. Si se detiene este servicio, puede que el equipo no pueda procesar las solicitudes de SNMP. Si se deshabilita este servicio, los servicios que dependen explícitamente de él no se podrán iniciar.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads