Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.21%
6.2.9200.16384 (win8_rtm.120725-1247)	6.85%
6.2.9200.16384 (win8_rtm.120725-1247)	1.21%
6.1.7600.16385 (win7_rtm.090713-1255)	0.40%
6.1.7600.16385 (win7_rtm.090713-1255)	43.15%
6.1.7600.16385 (win7_rtm.090713-1255)	27.02%
6.1.7600.16385 (win7_rtm.090713-1255)	2.02%
6.0.6000.16386 (vista_rtm.061101-2205)	6.85%
5.1.2600.5512 (xpsp.080413-0852)	10.48%
5.1.2600.5512 (xpsp.080413-0852)	0.40%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.40%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, RegEnumKeyW, RegOpenKeyExW, RegisterEventSourceA, ReportEventA, DeregisterEventSource, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, RegEnumValueA, RegQueryValueExA, RegNotifyChangeKeyValue, RegOpenKeyExA, RegEnumValueW, RegCloseKey, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegCreateKeyExA, LookupPrivilegeNameW, GetTokenInformation, AdjustTokenPrivileges, OpenProcessToken

kernel32.dll

UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, SetUnhandledExceptionFilter, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, GetModuleHandleA, SetEvent, Sleep, LeaveCriticalSection, EnterCriticalSection, ResumeThread, GetTickCount, MultiByteToWideChar, SetConsoleCtrlHandler, WaitForSingleObjectEx, CreateThread, DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, GetProcAddress, LoadLibraryExA, GetSystemTimeAsFileTime, HeapCreate, HeapDestroy, HeapAlloc, HeapFree, CloseHandle, CreateEventA, lstrcmpiA, WaitForMultipleObjects, ExpandEnvironmentStringsA, GetLastError, FreeLibrary, CompareStringA, RegisterApplicationRestart, GetCommandLineW, HeapSetInformation, lstrcmpiW, UnmapViewOfFile, CreateMutexW, CreateEventW, ReleaseMutex, MapViewOfFile, CreateFileMappingW, ResetEvent, Wow64EnableWow64FsRedirection, GetSystemWow64DirectoryA, GetSystemDirectoryA, LoadLibraryW, IsWow64Process, InterlockedCompareExchange, InterlockedExchange

msvcrt.dll

DllMain

snmpapi.dll

SnmpUtilMemReAlloc, SnmpSvcInitUptime, SnmpUtilUnicodeToUTF8, SnmpSvcGetUptime, SnmpUtilAsnAnyCpy, SnmpSvcAddrToSocket, SnmpSvcGetEnterpriseOID, SnmpUtilOidNCmp, SnmpUtilOidCmp, SnmpUtilVarBindFree, SnmpUtilOidFree, SnmpUtilOidCpy, SnmpUtilVarBindCpy, SnmpUtilVarBindListFree, SnmpUtilMemAlloc, SnmpUtilOctetsCmp, SnmpUtilOctetsFree, SnmpSvcSetLogLevel, SnmpSvcSetLogType, SnmpUtilMemFree, SnmpUtilVarBindListCpy, SnmpUtilAnsiToUnicode

ws2_32.dll

WSASocketA, WSASendTo, WSARecvFrom, WSAIoctl, WSASendMsg, freeaddrinfo, getaddrinfo

snmp.exe

SNMP Service by Microsoft

Remove snmp.exe

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	9228728c94b74f2e1ec78af56795f940
SHA1:	794fe235f0cfee1e13283f0dec901f096a00dbf8
SHA256:	35af180a364c3f518e7c4e74b42c72262601ac6aceba09035e8336b88098d34b

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is snmp.exe?

Simple Network Management Protocol (SNMP) is an Internet-standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations and printers. SNMP exposes management data in the form of variables on the managed systems, which describe the system configuration. These variables can then be queried by managing applications.

About snmp.exe (from Microsoft)

“SNMP provides the ability to send traps, or notifications, to advise an administrator when one or more conditions have been met. Traps are network packets that contain data relating to a component of ”

Details

File name:	snmp.exe
Publisher:	Microsoft Corporation
Product name:	SNMP Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\snmp.exe
Original name:	snmp.exe.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	48.5 KB (49,664 bytes)
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'SNMP' (Servicio SNMP)

Network connections

[UDP] listens on port 161

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00201463%	0.028634%
Kernel CPU:	0.00032531%	0.013761%
User CPU:	0.00168932%	0.014873%
Kernel CPU time:	3,058 ms/min	100,923,805ms/min
Memory
Private memory:	5.46 MB	21.59 MB
Private (maximum):	8.58 MB
Private (minimum):	8.58 MB
Non-paged memory:	5.46 MB	21.59 MB
Virtual memory:	40.88 MB	140.96 MB
Virtual memory (peak):	54.33 MB	169.69 MB
Working set:	8.58 MB	18.61 MB
Working set (peak):	8.84 MB	37.95 MB
Resource allocations
Threads:	7	12
Handles:	196	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	C:\Windows\System32\snmp.exe
Owner:	SYSTEM
Windows Service
Service name:	SNMP
Display name:	Servicio SNMP
Description:	“Habilita las solicitudes del protocolo simple de administración de redes (SNMP) que se van a procesar en este equipo. Si se detiene este servicio, puede que el equipo no pueda procesar las solicitudes de SNMP. Si se deshabilita este servicio, los servicios que dependen explícitamente de él no se podrán iniciar.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads