This is a Windows system installed file with Windows File Protection (WFP) enabled.
There are 43 versions of locator.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). It is started as a Windows Service called 'RPC-Locator' with the name 'RpcLocator' and described as “Verwaltet die RPC-Namendienstdatenbank.”. . It is also run with NETWORK SERVICE privileges. The average file size is about 53.43 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0006% including both foreground and background operations, the average private memory consumption is about 1016.29 KB with the maximum memory reaching around 2.33 MB. Addionally, typically read and write I/O disk operations is about 5 Bytes per minute for reads and 0 Bytes per minute for writes.
Remote Procedure Call (RPC) Locator service manages the RPC name service database.
(Note, the behaviors below are for all versions of locator.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
United States installs about 40.40% of Rpc Locator.