Versions

6.3.9600.16384 (winblue_rtm.130821-1623)	3.66%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.08%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.21%
6.3.9431.0 (winmain_bluemp.130615-1214)	0.04%
6.2.9200.16384 (win8_rtm.120725-1247)	2.10%
6.2.9200.16384 (win8_rtm.120725-1247)	11.73%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.08%
6.2.8400.0 (winmain_win8rc.120518-1423)	0.08%
6.2.8250.0 (winmain_win8beta.120217-1520)	0.04%
6.2.8102.0 (winmain_win8m3.110823-1455)	0.08%
6.1.7600.16385 (win7_rtm.090713-1255)	20.82%
6.1.7600.16385 (win7_rtm.090713-1255)	37.04%
6.1.7600.16385 (win7_rtm.090713-1255)	0.04%
6.0.6000.16386 (vista_rtm.061101-2205)	6.54%
6.0.6000.16386 (vista_rtm.061101-2205)	1.32%
5.2.3790.1830 (srv03_sp1_rtm.050324-1447)	0.08%
5.1.2600.5512 (xpsp.080413-2108)	10.16%
5.1.2600.5512 (xpsp.080413-2108)	0.78%
5.1.2600.5512 (xpsp.080413-2108)	0.53%
5.1.2600.5512 (xpsp.080413-2108)	0.08%
5.1.2600.5512 (xpsp.080413-2108)	0.49%
5.1.2600.5512 (xpsp.080413-2108)	0.04%
5.1.2600.5512 (xpsp.080413-2108)	0.33%
5.1.2600.5512 (xpsp.080413-2108)	0.08%
5.1.2600.5512 (xpsp.080413-2108)	0.04%
5.1.2600.5512 (xpsp.080413-2108)	0.16%
5.1.2600.5512 (xpsp.080413-2108)	0.21%
5.1.2600.5512 (xpsp.080413-2108)	0.25%
5.1.2600.5512 (xpsp.080413-2108)	0.08%
5.1.2600.5512 (xpsp.080413-2108)	0.04%
5.1.2600.5512 (xpsp.080413-2108)	0.04%
5.1.2600.5512 (xpsp.080413-2108)	0.04%
5.1.2600.3311 (xpsp.080212-0003)	0.08%
5.1.2600.3300 (xpsp.080125-2027)	0.04%
5.1.2600.3244 (xpsp.071030-1534)	0.04%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	2.18%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.08%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.04%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.04%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.04%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.04%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.04%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.04%

This is a Windows system installed file with Windows File Protection (WFP) enabled.

There are 43 versions of locator.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). It is started as a Windows Service called 'Remote Procedure Call (RPC) Locator' with the name 'RpcLocator' and described as “In Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.”. . It is also run with NETWORK SERVICE privileges. The average file size is about 53.43 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0006% including both foreground and background operations, the average private memory consumption is about 1016.29 KB with the maximum memory reaching around 2.33 MB. Addionally, typically read and write I/O disk operations is about 5 Bytes per minute for reads and 0 Bytes per minute for writes.

Remote Procedure Call (RPC) Locator service manages the RPC name service database.