Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	4.34%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.10%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.24%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.05%
6.2.9200.16384 (win8_rtm.120725-1247)	2.48%
6.2.9200.16384 (win8_rtm.120725-1247)	13.88%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.10%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.10%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.05%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.10%
6.1.7600.16385 (win7_rtm.090713-1255)	24.65%
6.1.7600.16385 (win7_rtm.090713-1255)	43.79%
6.1.7600.16385 (win7_rtm.090713-1255)	0.05%
6.0.6000.16386 (vista_rtm.061101-2205)	7.65%
6.0.6000.16386 (vista_rtm.061101-2205)	1.51%
5.1.2600.5512 (xpsp.080413-0852)	0.78%
5.1.2600.5512 (xpsp.080413-0852)	0.05%
5.1.2600.5512 (xpsp.080413-0852)	0.05%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.05%

Relationships

services.exe (Services and Controller app by Microsoft)

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, FreeSid, AddAccessAllowedAce, InitializeAcl, GetLengthSid, AllocateAndInitializeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA

kernel32.dll

SetEvent, LeaveCriticalSection, CloseHandle, DisconnectNamedPipe, ResetEvent, GetOverlappedResult, GetLastError, WriteFile, EnterCriticalSection, GlobalAlloc, GlobalFree, WaitForSingleObject, GetTickCount, ConnectNamedPipe, CreateNamedPipeA, DeleteCriticalSection, CreateEventA, InitializeCriticalSection, RegisterApplicationRestart, GetCommandLineW, HeapSetInformation, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, GetModuleHandleA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, InterlockedExchange

msvcrt.dll

DllMain

ws2_32.dll

freeaddrinfo, getaddrinfo

snmptrap.exe

SNMP Trap by Microsoft

Remove snmptrap.exe

Version:	6.1.7600.16385 (win7_rtm.090713-1255)
MD5:	6313f223e817cc09aa41811daa7f541d
SHA1:	e82089159a6ed6d11e308c88527ca636c43209af
SHA256:	d787061043beedb9386b048cb9e680e6a88a1cbae9bd4a8c0209155bfb76c630

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is snmptrap.exe?

Simple Network Management Protocol (SNMP) is a protocol-based network management system. It is used to manage TCP/IP-based and IPX-based networks. Microsoft provides an SNMP agent, or client, for Windows NT and Windows 95. Microsoft, however, does not offer any management capabilities. There are third-party companies that offer products specifically designed for SNMP management.

About snmptrap.exe (from Microsoft)

“SNMP provides the ability to send traps, or notifications, to advise an administrator when one or more conditions have been met. Traps are network packets that contain data relating to a component of ”

Details

File name:	snmptrap.exe
Publisher:	Microsoft Corporation
Product name:	SNMP Trap
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\snmptrap.exe
Original name:	snmptrap.exe.mui
File version:	6.1.7600.16385 (win7_rtm.090713-1255)
Product version:	6.1.7600.16385
Size:	14 KB (14,336 bytes)
Digital DNA
PE subsystem:	Windows Console
Entropy:	5.636827
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'SNMPTRAP'

Network connections

[UDP] listens on port 162

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00006087%	0.028634%
Kernel CPU:	0.00003175%	0.013761%
User CPU:	0.00002912%	0.014873%
Kernel CPU time:	13 ms/min	100,923,805ms/min
CPU cycles:	36,406/sec	17,470,203/sec
Memory
Private memory:	2.92 MB	21.59 MB
Private (maximum):	4.91 MB
Private (minimum):	3.95 MB
Non-paged memory:	2.92 MB	21.59 MB
Virtual memory:	33.01 MB	140.96 MB
Virtual memory (peak):	33.89 MB	169.69 MB
Working set:	4 MB	18.61 MB
Working set (peak):	5.64 MB	37.95 MB
Page faults:	1,582/min	2,039/min
I/O
I/O read transfer:	37 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	355 Bytes/sec	448.09 KB/min
I/O other operations:	22/sec	1,671/min
Resource allocations
Threads:	11	12
Handles:	105	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	C:\Windows\System32\snmptrap.exe
Owner:	LOCAL SERVICE
Windows Service
Service name:	SNMPTRAP
Display name:	SNMP-Trap
Description:	“Empfängt Trap-Nachrichten, die von lokalen oder Remote-SNMP-Agenten generiert wurden, und leitet die Nachrichten an SNMP-Verwaltungsprogramme, die auf diesem Computer ausgeführt werden, weiter. SNMP-basierte Programme auf diesem Computer empfangen keine SNMP-Trap-Nachrichten, falls dieser Dienst beendet wird. Falls dieser Dienst deaktiviert wird, können die Dienste, die von diesem Dienst ausschlie”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads