<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-COM-RuntimeBroker" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name="RuntimeBroker.exe" destinationPath="$(runtime.system32)\" sourceName="RuntimeBroker.exe" importPath="$(build.nttree)\" sourcePath=".\">
    <signatureInfo>
      <signatureDescriptor PETrust="true" pageHash="true" />
    </signatureInfo>
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>/VzFLIJd26MCzyAM0v2jswOsEC0Dv+bx96l7Hnsi5QI=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\runtimebroker.exe">
      <registryValue name="MitigationOptions" valueType="REG_QWORD" value="0000000001000000" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{9CA88EE3-ACB7-47c8-AFC4-AB702511C276}">
      <registryValue name="" valueType="REG_SZ" value="RuntimeBroker" />
      <registryValue name="AccessPermission" valueType="REG_BINARY" value="010014802401000030010000140000003000000002001C000100000011001400040000000101000000000010001000000200F40007000000000014000300000001010000000000051200000000001400030000000101000000000005130000000000140003000000010100000000000514000000000014000300000001010000000000050A0000000000180003000000010200000000000F02000000010000000000380003000000010A00000000000F0300000000040000A127608F9ABB183463B677FF9DD5B66CE7321A680852439286A61FD898171B3B09004C000300000001010000000000050400000061727478F82E000000570049004E003A002F002F00490053004D0055004C0054004900530045005300530049004F004E0053004B005500A2010100000000000512000000010100000000000512000000" />
      <registryValue name="AppIDFlags" valueType="REG_DWORD" value="0x00000258" />
      <registryValue name="AuthenticationLevel" valueType="REG_DWORD" value="0x00000006" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value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
      <registryValue name="RunAs" valueType="REG_SZ" value="Interactive User" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{15c20b67-12e7-4bb6-92bb-7aff07997402}">
      <registryValue name="" valueType="REG_SZ" value="PerAppRuntimeBroker" />
      <registryValue name="AccessPermission" valueType="REG_BINARY" value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
      <registryValue name="AppIDFlags" valueType="REG_DWORD" value="0x00001258" />
      <registryValue name="AuthenticationLevel" valueType="REG_DWORD" value="0x00000006" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value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
      <registryValue name="RunAs" valueType="REG_SZ" value="Interactive User" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{D63B10C5-BB46-4990-A94F-E40B9D520160}">
      <registryValue name="" valueType="REG_SZ" value="RuntimeBroker" />
      <registryValue name="AppID" valueType="REG_SZ" value="{9CA88EE3-ACB7-47c8-AFC4-AB702511C276}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{D63B10C5-BB46-4990-A94F-E40B9D520160}\LocalServer32">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\RuntimeBroker.exe" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{2593f8b9-4eaf-457c-b68a-50f6b8ea6b54}">
      <registryValue name="" valueType="REG_SZ" value="PerAppRuntimeBroker" />
      <registryValue name="AppID" valueType="REG_SZ" value="{15c20b67-12e7-4bb6-92bb-7aff07997402}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{2593f8b9-4eaf-457c-b68a-50f6b8ea6b54}\LocalServer32">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\RuntimeBroker.exe" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{78dd0a2b-3ed9-4ef5-81e4-c29c9a05b657}\LocalServer32">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\RuntimeBroker.exe" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
</assembly>