Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	1.21%
6.2.9200.16384 (win8_rtm.120725-1247)	6.85%
6.2.9200.16384 (win8_rtm.120725-1247)	1.21%
6.1.7600.16385 (win7_rtm.090713-1255)	0.40%
6.1.7600.16385 (win7_rtm.090713-1255)	43.15%
6.1.7600.16385 (win7_rtm.090713-1255)	27.02%
6.1.7600.16385 (win7_rtm.090713-1255)	2.02%
6.0.6000.16386 (vista_rtm.061101-2205)	6.85%
5.1.2600.5512 (xpsp.080413-0852)	10.48%
5.1.2600.5512 (xpsp.080413-0852)	0.40%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.40%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

SetServiceStatus, RegEnumKeyW, RegOpenKeyExW, RegisterEventSourceA, ReportEventA, DeregisterEventSource, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, RegEnumValueA, RegQueryValueExA, RegNotifyChangeKeyValue, RegOpenKeyExA, RegEnumValueW, RegCloseKey, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegCreateKeyExA, LookupPrivilegeNameW, GetTokenInformation, AdjustTokenPrivileges, OpenProcessToken

kernel32.dll

UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, SetUnhandledExceptionFilter, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, GetModuleHandleA, SetEvent, Sleep, LeaveCriticalSection, EnterCriticalSection, ResumeThread, GetTickCount, MultiByteToWideChar, SetConsoleCtrlHandler, WaitForSingleObjectEx, CreateThread, DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, GetProcAddress, LoadLibraryExA, GetSystemTimeAsFileTime, HeapCreate, HeapDestroy, HeapAlloc, HeapFree, CloseHandle, CreateEventA, lstrcmpiA, WaitForMultipleObjects, ExpandEnvironmentStringsA, GetLastError, FreeLibrary, CompareStringA, RegisterApplicationRestart, GetCommandLineW, HeapSetInformation, lstrcmpiW, UnmapViewOfFile, CreateMutexW, CreateEventW, ReleaseMutex, MapViewOfFile, CreateFileMappingW, ResetEvent, Wow64EnableWow64FsRedirection, GetSystemWow64DirectoryA, GetSystemDirectoryA, LoadLibraryW, IsWow64Process, InterlockedCompareExchange, InterlockedExchange

msvcrt.dll

DllMain

snmpapi.dll

SnmpUtilMemReAlloc, SnmpSvcInitUptime, SnmpUtilUnicodeToUTF8, SnmpSvcGetUptime, SnmpUtilAsnAnyCpy, SnmpSvcAddrToSocket, SnmpSvcGetEnterpriseOID, SnmpUtilOidNCmp, SnmpUtilOidCmp, SnmpUtilVarBindFree, SnmpUtilOidFree, SnmpUtilOidCpy, SnmpUtilVarBindCpy, SnmpUtilVarBindListFree, SnmpUtilMemAlloc, SnmpUtilOctetsCmp, SnmpUtilOctetsFree, SnmpSvcSetLogLevel, SnmpSvcSetLogType, SnmpUtilMemFree, SnmpUtilVarBindListCpy, SnmpUtilAnsiToUnicode

ws2_32.dll

WSASocketA, WSASendTo, WSARecvFrom, WSAIoctl, WSASendMsg, freeaddrinfo, getaddrinfo

snmp.exe

SNMP Service by Microsoft

Remove snmp.exe

Version:	6.2.9200.16384 (win8_rtm.120725-1247)
MD5:	8d0445719a3f2e41dce5e9ed8e3d17ad
SHA1:	ce06d16cb5f11dca31529827e25e780527cb10de
SHA256:	e53992568ec233abf45d7b0b9d4da13571e7128f4ede58b758b57f15fade387e

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is snmp.exe?

Simple Network Management Protocol (SNMP) is an Internet-standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations and printers. SNMP exposes management data in the form of variables on the managed systems, which describe the system configuration. These variables can then be queried by managing applications.

About snmp.exe (from Microsoft)

“SNMP provides the ability to send traps, or notifications, to advise an administrator when one or more conditions have been met. Traps are network packets that contain data relating to a component of ”

Details

File name:	snmp.exe
Publisher:	Microsoft Corporation
Product name:	SNMP Service
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\snmp.exe
Original name:	snmp.exe.mui
File version:	6.2.9200.16384 (win8_rtm.120725-1247)
Product version:	6.2.9200.16384
Size:	49.5 KB (50,688 bytes)
Digital DNA
File packed:	No
Code language:	Microsoft Visual C# / Basic .NET
.NET CLR:	Yes
.NET NGENed:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'SNMP' (Servicio SNMP)

Network connections

[UDP] listens on port 161

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00140661%	0.028634%
Kernel CPU:	0.00110224%	0.013761%
User CPU:	0.00030438%	0.014873%
Kernel CPU time:	23,785,558 ms/min	100,923,805ms/min
CPU cycles:	649,010/sec	17,470,203/sec
Context switches:	30/sec	284/sec
Memory
Private memory:	2.88 MB	21.59 MB
Private (maximum):	6.43 MB
Private (minimum):	4.76 MB
Non-paged memory:	2.88 MB	21.59 MB
Virtual memory:	41.42 MB	140.96 MB
Virtual memory (peak):	50.99 MB	169.69 MB
Working set:	4.96 MB	18.61 MB
Working set (peak):	7.79 MB	37.95 MB
Page faults:	26,853/min	2,039/min
I/O
I/O read transfer:	739 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	2.69 KB/sec	448.09 KB/min
I/O other operations:	27/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	173	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	C:\Windows\System32\snmp.exe
Owner:	SYSTEM
Windows Service
Service name:	SNMP
Display name:	Servicio SNMP
Description:	“Habilita las solicitudes del protocolo simple de administración de redes (SNMP) que se van a procesar en este equipo. Si se detiene este servicio, puede que el equipo no pueda procesar las solicitudes de SNMP. Si se deshabilita este servicio, los servicios que dependen explícitamente de él no se podrán iniciar.”
Type:	Win32OwnProcess
Parent process:	services.exe (by Microsoft)

Threads