Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.21%
6.2.9200.16384 (win8_rtm.120725-1247)	6.85%
6.2.9200.16384 (win8_rtm.120725-1247)	1.21%
6.1.7600.16385 (win7_rtm.090713-1255)	0.40%
6.1.7600.16385 (win7_rtm.090713-1255)	43.15%
6.1.7600.16385 (win7_rtm.090713-1255)	27.02%
6.1.7600.16385 (win7_rtm.090713-1255)	2.02%
6.0.6000.16386 (vista_rtm.061101-2205)	6.85%
5.1.2600.5512 (xpsp.080413-0852)	10.48%
5.1.2600.5512 (xpsp.080413-0852)	0.40%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.40%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, RegEnumKeyW, RegOpenKeyExW, RegisterEventSourceA, ReportEventA, DeregisterEventSource, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, RegEnumValueA, RegQueryValueExA, RegNotifyChangeKeyValue, RegOpenKeyExA, RegEnumValueW, RegCloseKey, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegCreateKeyExA, LookupPrivilegeNameW, GetTokenInformation, AdjustTokenPrivileges, OpenProcessToken

kernel32.dll

UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, SetUnhandledExceptionFilter, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, GetModuleHandleA, SetEvent, Sleep, LeaveCriticalSection, EnterCriticalSection, ResumeThread, GetTickCount, MultiByteToWideChar, SetConsoleCtrlHandler, WaitForSingleObjectEx, CreateThread, DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, GetProcAddress, LoadLibraryExA, GetSystemTimeAsFileTime, HeapCreate, HeapDestroy, HeapAlloc, HeapFree, CloseHandle, CreateEventA, lstrcmpiA, WaitForMultipleObjects, ExpandEnvironmentStringsA, GetLastError, FreeLibrary, CompareStringA, RegisterApplicationRestart, GetCommandLineW, HeapSetInformation, lstrcmpiW, UnmapViewOfFile, CreateMutexW, CreateEventW, ReleaseMutex, MapViewOfFile, CreateFileMappingW, ResetEvent, Wow64EnableWow64FsRedirection, GetSystemWow64DirectoryA, GetSystemDirectoryA, LoadLibraryW, IsWow64Process, InterlockedCompareExchange, InterlockedExchange

msvcrt.dll

DllMain

snmpapi.dll

SnmpUtilMemReAlloc, SnmpSvcInitUptime, SnmpUtilUnicodeToUTF8, SnmpSvcGetUptime, SnmpUtilAsnAnyCpy, SnmpSvcAddrToSocket, SnmpSvcGetEnterpriseOID, SnmpUtilOidNCmp, SnmpUtilOidCmp, SnmpUtilVarBindFree, SnmpUtilOidFree, SnmpUtilOidCpy, SnmpUtilVarBindCpy, SnmpUtilVarBindListFree, SnmpUtilMemAlloc, SnmpUtilOctetsCmp, SnmpUtilOctetsFree, SnmpSvcSetLogLevel, SnmpSvcSetLogType, SnmpUtilMemFree, SnmpUtilVarBindListCpy, SnmpUtilAnsiToUnicode

ws2_32.dll

WSASocketA, WSASendTo, WSARecvFrom, WSAIoctl, WSASendMsg, freeaddrinfo, getaddrinfo

snmp.exe

SNMP Service by Microsoft

Remove snmp.exe

Version:	5.1.2600.5512 (xpsp.080413-0852)
MD5:	60c377be6b3cc83f6a8584934b181d2e
SHA1:	e34ddabc238bede14d59c6f4b908d448bc64a6b1
SHA256:	58f94cad0149f634be2f630a39561073f9399a904e3e3143c0d0bec348a0c3b2

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is snmp.exe?

Simple Network Management Protocol (SNMP) is an Internet-standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations and printers. SNMP exposes management data in the form of variables on the managed systems, which describe the system configuration. These variables can then be queried by managing applications.

About snmp.exe (from Microsoft)

“SNMP provides the ability to send traps, or notifications, to advise an administrator when one or more conditions have been met. Traps are network packets that contain data relating to a component of ”

Details

File name:	snmp.exe
Publisher:	Microsoft Corporation
Product name:	SNMP Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\snmp.exe
Original name:	snmp.exe.mui
File version:	5.1.2600.5512 (xpsp.080413-0852)
Product version:	5.1.2600.5512
Size:	32.5 KB (33,280 bytes)
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'SNMP' (Servicio SNMP)

Network connections

[UDP] listens on port 161

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00187860%	0.028634%
Kernel CPU:	0.00112178%	0.013761%
User CPU:	0.00075682%	0.014873%
Kernel CPU time:	20,785 ms/min	100,923,805ms/min
Context switches:	2/sec	284/sec
Memory
Private memory:	2.63 MB	21.59 MB
Private (maximum):	4.14 MB
Private (minimum):	2.95 MB
Non-paged memory:	2.63 MB	21.59 MB
Virtual memory:	26.03 MB	140.96 MB
Virtual memory (peak):	27.5 MB	169.69 MB
Working set:	3 MB	18.61 MB
Working set (peak):	4.8 MB	37.95 MB
Page faults:	3,003/min	2,039/min
I/O
I/O read transfer:	185 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	10.32 KB/sec	448.09 KB/min
I/O other operations:	22/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	242	600
GUI GDI count:	4	103
GUI USER count:	1	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	C:\Windows\System32\snmp.exe
Owner:	SYSTEM
Windows Service
Service name:	SNMP
Display name:	Servicio SNMP
Description:	“Habilita las solicitudes del protocolo simple de administración de redes (SNMP) que se van a procesar en este equipo. Si se detiene este servicio, puede que el equipo no pueda procesar las solicitudes de SNMP. Si se deshabilita este servicio, los servicios que dependen explícitamente de él no se podrán iniciar.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

ADVAPI32.dll
Total CPU:	0.00149032%	0.272967%
Kernel CPU:	0.00079484%	0.107585%
User CPU:	0.00069548%	0.165382%
Memory:	620 KB	1.16 MB
evntagnt.dll
Total CPU:	0.00013428%
Kernel CPU:	0.00010035%
User CPU:	0.00003393%
Memory:	116 KB
snmp.exe (main module)
Total CPU:	0.00001393%
Kernel CPU:	0.00000886%
User CPU:	0.00000506%
Memory:	40 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

mswsock.dll (Microsoft Windows Sockets 2.0 Service Provider by Microsoft)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	40.50%
Windows 7 Ultimate	20.00%
Windows 7 Professional	14.50%
Microsoft Windows XP	10.50%
Windows 8 Pro	4.50%
Windows Vista Home Premium	3.50%
Windows 8	3.00%
Windows 8.1 Single Language	1.00%
Windows 7 Starter	1.00%
Windows 8 Pro with Media Center	1.00%
Windows 8.1	0.50%

Distribution by country

United States installs about 53.00% of SNMP Service.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	24.51%
Hewlett-Packard	23.53%
Dell	21.57%
Acer	12.75%
Toshiba	9.80%
GIGABYTE	3.92%
Samsung	0.98%
Sahara	0.98%
Alienware	0.98%
American Megatrends	0.98%

Remove Adware and Spyware Programs, FREE Download!