<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-HVSI-ApplicationGuardCSP" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name="windowsdefenderapplicationguardcsp.dll" destinationPath="$(runtime.system32)\" sourceName="windowsdefenderapplicationguardcsp.dll" importPath="$(build.nttree)\hvsi\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>nftp2r2b8CpIQKWhcCNciSo5vR1L9jP9TBlU94zPrN8=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <registryKeys>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{F80FC80C-6A04-46FB-8555-D769E334E9FC}">
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
      <registryValue name="" valueType="REG_SZ" value="WindowsDefenderApplicationGuardCSP" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{F80FC80C-6A04-46FB-8555-D769E334E9FC}\InProcServer32">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\windowsdefenderapplicationguardcsp.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Free" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\CSPs\.\Device\Vendor\MSFT\WindowsDefenderApplicationGuard">
      <registryValue name="" valueType="REG_SZ" value="{F80FC80C-6A04-46FB-8555-D769E334E9FC}" />
      <registryValue name="csp_version" valueType="REG_SZ" value="com.microsoft/1.4/mdm/WindowsDefenderApplicationGuard" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Hvsi">
      <registryValue name="DisableHvsi" valueType="REG_DWORD" value="0x00000000" />
    </registryKey>
  </registryKeys>
  <instrumentation xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{64A98C25-9E00-404E-84AD-6700DFE02529}" message="$(string.WDAGEvaluatorCSPProviderNameOperational)" messageFileName="%SystemRoot%\system32\hvsievaluator.exe" name="Microsoft-Windows-WDAG-PolicyEvaluator-CSP" resourceFileName="%SystemRoot%\system32\hvsievaluator.exe" symbol="WDAG_POLICY_EVAL_CSP_Operational">
        <channels>
          <channel chid="WDAGEvaluatorCSPOperational" enabled="true" message="$(string.OperationalChannel.Name)" name="Microsoft-Windows-WDAG-PolicyEvaluator-CSP/Operational" type="Operational" />
        </channels>
      </provider>
      <provider guid="{E53DF8BA-367A-4406-98D5-709FFB169681}" message="$(string.WDAGEvaluatorGPProviderNameOperational)" messageFileName="%SystemRoot%\system32\hvsigpext.dll" name="Microsoft-Windows-WDAG-PolicyEvaluator-GP" resourceFileName="%SystemRoot%\system32\hvsigpext.dll" symbol="WDAG_POLICY_EVAL_GP_Operational">
        <channels>
          <channel chid="WDAGEvaluatorGPOperational" enabled="true" message="$(string.OperationalChannel.Name)" name="Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational" type="Operational" />
        </channels>
      </provider>
      <cmi />
    </events>
  </instrumentation>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="WDAGEvaluatorCSPProviderNameOperational" value="WDAG Policy Evaluator CSP Provider" />
        <string id="OperationalChannel.Name" value="Operational" />
        <string id="WDAGEvaluatorcontainerCreationFailureMessage" value="Failed to start container service when Hvsi is turned on: %1" />
        <string id="WDAGEvaluatorMergePolicyFailureMessage" value="Failed to merge policy to CSP current hive: %1" />
        <string id="WDAGEvaluatorMissingNetIsoPoliciesInfoMessage" value="At least one mandatory network isolation policy must be set, please configure: %1" />
        <string id="WDAGEvaluatorSendAlertFailureMessage" value="Failed to send alert message back to MDM server: %1" />
        <string id="WDAGEvaluatorStatusUpdateFailureMessage" value="Failed to update WDAG status" />
        <string id="WDAGEvaluatorPlatformStatusUpdateFailureMessage" value="Failed to update WDAG Platform status" />
        <string id="WDAGEvaluatorGPProviderNameOperational" value="WDAG Policy Evaluator GP Provider" />
        <string id="WDAGCSPDeleteChildFailureMessage" value="Microsoft Defender Application Guard CSP: delete value failed:%1" />
        <string id="WDAGCSPSetValueFailureMessage" value="Microsoft Defender Application Guard CSP: Failed to set one or more settings : %1" />
        <string id="WDAGEvaluatorSystemRequirementIsNotMetMessage" value="The system does not meet the minimal requirement: %1" />
        <string id="WDAGEvaluatorInformationalMessage" value=" %1 %2" />
        <string id="WDAGExecuteMissingDependencyMessage" value="Microsoft Defender Application Guard CSP: Feature Installation action failed because of missing dependency" />
      </stringTable>
    </resources>
  </localization>
</assembly>