<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-Security-NGC-KSPSvc" version="10.0.10586.318" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly>
      <assemblyIdentity name="Microsoft-Windows-Security-NGC-KSPSvc.Resources" version="10.0.10586.318" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
    </dependentAssembly>
  </dependency>
  <file name="ngcsvc.dll" destinationPath="$(runtime.system32)\" sourceName="ngcsvc.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">Ljju8/SHp90LcZoEj/oOs2skh6EGi7MiVT6d0vzkZxE=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories.Services" version="10.0.10586.318" publicKeyToken="31bf3856ad364e35" typeName="Service" />
      <categoryInstance subcategory="NgcSvc">
        <serviceData name="NgcSvc" displayName="@%SystemRoot%\System32\ngcsvc.dll,-100" errorControl="normal" group="Cryptography" imagePath="%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted" start="demand" type="win32ShareProcess" description="@%SystemRoot%\System32\ngcsvc.dll,-101" dependOnService="RpcSs" objectName="LocalSystem" sidType="unrestricted" requiredPrivileges="SeImpersonatePrivilege">
          <securityDescriptor name="NgcSvcSD" />
          <failureActions resetPeriod="900">
            <actions>
              <action type="restartService" delay="1000" />
              <action type="restartService" delay="10000" />
              <action type="none" />
            </actions>
          </failureActions>
          <serviceTrigger xmlns="urn:schemas-microsoft-com:asm.v3" action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="0e3ae095-8a23-48f4-9782-03c1594a890e" />
          </serviceTrigger>
          <serviceTrigger xmlns="urn:schemas-microsoft-com:asm.v3" action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="c225e799-29de-42af-bc05-1e2127cc056e" />
          </serviceTrigger>
          <serviceTrigger xmlns="urn:schemas-microsoft-com:asm.v3" action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="2b70bed6-1757-4d22-9f39-448589fbebf5" />
          </serviceTrigger>
          <serviceTrigger xmlns="urn:schemas-microsoft-com:asm.v3" action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="9cbc9d3a-7586-4814-8d70-18737dcbe523" />
          </serviceTrigger>
          <serviceTrigger xmlns="urn:schemas-microsoft-com:asm.v3" action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="2c2fd034-05cb-4f44-a75d-2a5cf81499c1" />
          </serviceTrigger>
        </serviceData>
      </categoryInstance>
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="SvcHost" />
      <categoryInstance subcategory="LocalSystemNetworkRestricted">
        <serviceGroup xmlns="urn:schemas-microsoft-com:asm.v3" position="last" serviceName="NgcSvc" />
      </categoryInstance>
    </categoryMembership>
  </memberships>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NgcSvc">
      <securityDescriptor name="NgcSvcRegistrySecurity" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NgcSvc\Parameters">
      <registryValue name="ServiceDll" valueType="REG_EXPAND_SZ" value="%SystemRoot%\system32\ngcsvc.dll" />
      <registryValue name="ServiceMain" valueType="REG_SZ" value="NgcServiceMain" />
      <registryValue name="ServiceDllUnloadOnStop" valueType="REG_DWORD" value="0x00000001" />
      <securityDescriptor name="NgcSvcRegistrySecurity" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="NgcSvcRegistrySecurity" sddl="O:SYG:SYD:(A;;0x20001;;;AU)(A;;0xe003f;;;SY)(A;;0xe003d;;;BA)(A;;0x11;;;BU)S:(AU;FA;0xf003f;;;WD)" operationHint="replace" />
          <securityDescriptorDefinition name="NgcSvcSD" sddl="O:SYG:SYD:(A;;0x20085;;;AU)(A;;0xe00ff;;;SY)(A;;0xe009d;;;BA)(A;;0x85;;;BU)S:(AU;FA;0xf00ff;;;WD)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
</assembly>