Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.3.9600.16384 (winblue_rtm.130821-1623) 3.66%
6.3.9600.16384 (winblue_rtm.130821-1623) 0.08%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.21%
6.3.9431.0 (winmain_bluemp.130615-1214) 0.04%
6.2.9200.16384 (win8_rtm.120725-1247) 2.10%
6.2.9200.16384 (win8_rtm.120725-1247) 11.73%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.08%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.08%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.04%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.08%
6.1.7600.16385 (win7_rtm.090713-1255) 20.82%
6.1.7600.16385 (win7_rtm.090713-1255) 37.04%
6.1.7600.16385 (win7_rtm.090713-1255) 0.04%
6.0.6000.16386 (vista_rtm.061101-2205) 6.54%
6.0.6000.16386 (vista_rtm.061101-2205) 1.32%
5.2.3790.1830 (srv03_sp1_rtm.050324-1447) 0.08%
5.1.2600.5512 (xpsp.080413-2108) 10.16%
5.1.2600.5512 (xpsp.080413-2108) 0.78%
5.1.2600.5512 (xpsp.080413-2108) 0.53%
5.1.2600.5512 (xpsp.080413-2108) 0.08%
5.1.2600.5512 (xpsp.080413-2108) 0.49%
5.1.2600.5512 (xpsp.080413-2108) 0.04%
5.1.2600.5512 (xpsp.080413-2108) 0.33%
5.1.2600.5512 (xpsp.080413-2108) 0.08%
5.1.2600.5512 (xpsp.080413-2108) 0.04%
View more

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, SetServiceStatus
api-ms-win-core-errorhandling-l1-1-0.dll
GetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedCompareExchange, InterlockedExchange
api-ms-win-core-libraryloader-l1-1-0.dll
GetModuleHandleA
api-ms-win-core-misc-l1-1-0.dll
Sleep
api-ms-win-core-processthreads-l1-1-0.dll
TerminateProcess, ExitProcess, GetCurrentThreadId, GetCurrentProcess, GetCurrentProcessId
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-synch-l1-1-0.dll
CreateEventW, SetEvent, WaitForSingleObject
api-ms-win-core-sysinfo-l1-1-0.dll
GetSystemTimeAsFileTime, GetTickCount
api-ms-win-service-core-l1-1-0.dll
StartServiceCtrlDispatcherW, SetServiceStatus
api-ms-win-service-winsvc-l1-1-0.dll
RegisterServiceCtrlHandlerW
kernel32.dll
ExitProcess, GetLastError, SetEvent, WaitForSingleObject, CreateEventW, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, InterlockedCompareExchange, Sleep, UnhandledExceptionFilter, InterlockedExchange
msvcrt.dll
DllMain

locator.exe

Rpc Locator by Microsoft

Remove locator.exe
Version:   6.1.7600.16385 (win7_rtm.090713-1255)
MD5:   d5ba242d4cf8e384db90e6a8ed850b8c
SHA1:   be6a56b561319da5969d2854d1604a2a1413a746
SHA256:   cb4cb2608b5e31b55fb1a2cf4051e6d08a0c2a5fb231b2116f95938d7577334e
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is locator.exe?

Remote Procedure Call (RPC) Locator service manages the RPC name service database.

Overview

locator.exe runs as a service under the name RPC-Locator (RpcLocator) with minimal NETWORK SERVICE privileges on the local PC and acts as the computer on the network. This version is designed to run on Windows 7 and is compiled as a 64 bit program.

DetailsDetails

File name:locator.exe
Publisher:Microsoft Corporation
Product name:Rpc Locator
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\locator.exe
Original name:locator.exe.mui
File version:6.1.7600.16385 (win7_rtm.090713-1255)
Product version:6.1.7600.16385
Size:10 KB (10,240 bytes)
Digital DNA
PE subsystem:Windows Console
Entropy:5.301191
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'RpcLocator'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00000203%
0.028634%
Kernel CPU:0.00000203%
0.013761%
Kernel CPU time:2 ms/min
100,923,805ms/min
CPU cycles:414/sec
17,470,203/sec
Memory
Private memory:1.23 MB
21.59 MB
Private (maximum):2.4 MB
Private (minimum):2.05 MB
Non-paged memory:1.23 MB
21.59 MB
Virtual memory:11.32 MB
140.96 MB
Virtual memory (peak):11.88 MB
169.69 MB
Working set:2.1 MB
18.61 MB
Working set (peak):2.66 MB
37.95 MB
Page faults:686/min
2,039/min
I/O
I/O other transfer:5 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:3
12
Handles:30
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:C:\Windows\System32\locator.exe
Owner:NETWORK SERVICE
Windows Service
Service name:RpcLocator
Display name:RPC-Locator
Description:“Verwaltet die RPC-Namendienstdatenbank.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 56.50%
Windows 7 Ultimate 25.50%
Windows 7 Professional 8.00%
Windows Vista Home Premium 4.50%
Windows 7 Home Basic 2.50%
Windows 7 Starter 1.00%
Windows Seven Black Edition 0.50%
Windows Vista Home Basic 0.50%
Windows 8 Enterprise Evaluation 0.50%
Windows 8 Pro 0.50%

Distribution by countryDistribution by country

United States installs about 49.25% of Rpc Locator.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 26.12%
Hewlett-Packard 19.40%
ASUS 13.43%
Toshiba 12.69%
Acer 11.19%
Sony 3.73%
Lenovo 3.73%
GIGABYTE 2.61%
Samsung 2.24%
MSI 1.49%
Alienware 0.75%
Medion 0.75%
Intel 0.75%
Gateway 0.75%
Sahara 0.37%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE