Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.21%
6.2.9200.16384 (win8_rtm.120725-1247)	6.85%
6.2.9200.16384 (win8_rtm.120725-1247)	1.21%
6.1.7600.16385 (win7_rtm.090713-1255)	0.40%
6.1.7600.16385 (win7_rtm.090713-1255)	43.15%
6.1.7600.16385 (win7_rtm.090713-1255)	27.02%
6.1.7600.16385 (win7_rtm.090713-1255)	2.02%
6.0.6000.16386 (vista_rtm.061101-2205)	6.85%
5.1.2600.5512 (xpsp.080413-0852)	10.48%
5.1.2600.5512 (xpsp.080413-0852)	0.40%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.40%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, RegEnumKeyW, RegOpenKeyExW, RegisterEventSourceA, ReportEventA, DeregisterEventSource, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, RegEnumValueA, RegQueryValueExA, RegNotifyChangeKeyValue, RegOpenKeyExA, RegEnumValueW, RegCloseKey, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegCreateKeyExA, LookupPrivilegeNameW, GetTokenInformation, AdjustTokenPrivileges, OpenProcessToken

kernel32.dll

UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, SetUnhandledExceptionFilter, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, GetModuleHandleA, SetEvent, Sleep, LeaveCriticalSection, EnterCriticalSection, ResumeThread, GetTickCount, MultiByteToWideChar, SetConsoleCtrlHandler, WaitForSingleObjectEx, CreateThread, DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, GetProcAddress, LoadLibraryExA, GetSystemTimeAsFileTime, HeapCreate, HeapDestroy, HeapAlloc, HeapFree, CloseHandle, CreateEventA, lstrcmpiA, WaitForMultipleObjects, ExpandEnvironmentStringsA, GetLastError, FreeLibrary, CompareStringA, RegisterApplicationRestart, GetCommandLineW, HeapSetInformation, lstrcmpiW, UnmapViewOfFile, CreateMutexW, CreateEventW, ReleaseMutex, MapViewOfFile, CreateFileMappingW, ResetEvent, Wow64EnableWow64FsRedirection, GetSystemWow64DirectoryA, GetSystemDirectoryA, LoadLibraryW, IsWow64Process, InterlockedCompareExchange, InterlockedExchange

msvcrt.dll

DllMain

snmpapi.dll

SnmpUtilMemReAlloc, SnmpSvcInitUptime, SnmpUtilUnicodeToUTF8, SnmpSvcGetUptime, SnmpUtilAsnAnyCpy, SnmpSvcAddrToSocket, SnmpSvcGetEnterpriseOID, SnmpUtilOidNCmp, SnmpUtilOidCmp, SnmpUtilVarBindFree, SnmpUtilOidFree, SnmpUtilOidCpy, SnmpUtilVarBindCpy, SnmpUtilVarBindListFree, SnmpUtilMemAlloc, SnmpUtilOctetsCmp, SnmpUtilOctetsFree, SnmpSvcSetLogLevel, SnmpSvcSetLogType, SnmpUtilMemFree, SnmpUtilVarBindListCpy, SnmpUtilAnsiToUnicode

ws2_32.dll

WSASocketA, WSASendTo, WSARecvFrom, WSAIoctl, WSASendMsg, freeaddrinfo, getaddrinfo

snmp.exe

SNMP Service by Microsoft

Remove snmp.exe

Version:	6.3.9600.16384 (winblue_rtm.130821-1623)
MD5:	1ffccabd7dfaf8a1429f9ca82b49a30e
SHA1:	3ef2423151f6ffa247f39d99990d0c48df94f00b

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is snmp.exe?

Simple Network Management Protocol (SNMP) is an Internet-standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations and printers. SNMP exposes management data in the form of variables on the managed systems, which describe the system configuration. These variables can then be queried by managing applications.

About snmp.exe (from Microsoft)

“SNMP provides the ability to send traps, or notifications, to advise an administrator when one or more conditions have been met. Traps are network packets that contain data relating to a component of ”

Details

File name:	snmp.exe
Publisher:	Microsoft Corporation
Product name:	SNMP Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\snmp.exe
Original name:	snmp.exe.mui
File version:	6.3.9600.16384 (winblue_rtm.130821-1623)
Product version:	6.3.9600.16384
Size:	49.5 KB (50,688 bytes)
Build date:	8/22/2013 4:31 AM
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'SNMP' (Servicio SNMP)

Network connections

[UDP] listens on port 161

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00128655%	0.028634%
Kernel CPU:	0.00103243%	0.013761%
User CPU:	0.00025412%	0.014873%
Kernel CPU time:	828 ms/min	100,923,805ms/min
CPU cycles:	1,110,076/sec	17,470,203/sec
Memory
Private memory:	2.73 MB	21.59 MB
Private (maximum):	7.16 MB
Private (minimum):	6.57 MB
Non-paged memory:	2.73 MB	21.59 MB
Virtual memory:	39 MB	140.96 MB
Virtual memory (peak):	50.7 MB	169.69 MB
Working set:	6.62 MB	18.61 MB
Working set (peak):	7.8 MB	37.95 MB
I/O
I/O read transfer:	1.99 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	5.14 KB/sec	448.09 KB/min
I/O other operations:	56/sec	1,671/min
Resource allocations
Threads:	5	12
Handles:	177	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	C:\Windows\System32\snmp.exe
Owner:	SYSTEM
Windows Service
Service name:	SNMP
Display name:	Servicio SNMP
Description:	“Habilita las solicitudes del protocolo simple de administración de redes (SNMP) que se van a procesar en este equipo. Si se detiene este servicio, puede que el equipo no pueda procesar las solicitudes de SNMP. Si se deshabilita este servicio, los servicios que dependen explícitamente de él no se podrán iniciar.”
Type:	Win32OwnProcess

Threads