<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-NetworkConnectionBroker" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly dependencyType="prerequisite">
      <assemblyIdentity name="Microsoft-Windows-NetworkConnectionBroker.Resources" version="10.0.26100.8521" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
    </dependentAssembly>
  </dependency>
  <file name="ncbservice.dll" destinationPath="$(runtime.system32)\" sourceName="ncbservice.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>O7dNByZmz/LxA+UQQIR2GkH3hzM4f6upihpS4Parvl8=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="keepaliveprovider.dll" destinationPath="$(runtime.system32)\" sourceName="keepaliveprovider.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>z/5bmRM9hPb/s7g37mjd/ahhEHvu4pX6yj5odb1HHV8=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="sbservicetrigger.dll" destinationPath="$(runtime.system32)\" sourceName="sbservicetrigger.dll" importPath="$(build.nttree)\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>53BgjZ3a2LUdKbtdcntEw+/lvNuwsl7oMVPMS+2Mkls=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories.Services" version="10.0.26100.8521" publicKeyToken="31bf3856ad364e35" typeName="Service" />
      <categoryInstance>
        <serviceData name="NcbService" displayName="@%SystemRoot%\system32\ncbservice.dll,-500" errorControl="normal" start="demand" type="win32ShareProcess" description="@%SystemRoot%\system32\ncbservice.dll,-501" dependOnService="RpcSS,tcpip,BrokerInfrastructure" imagePath="%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p" objectName="LocalSystem" requiredPrivileges="SeCreateGlobalPrivilege,SeImpersonatePrivilege,SeDebugPrivilege" sidType="unrestricted">
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="e40f7b57-7a25-4cd3-a135-7f7d3df9d16b" />
          </serviceTrigger>
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="5222821f-d5e2-4885-84f1-5f6185a0ec41" />
          </serviceTrigger>
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="880fd55e-43b9-11e0-b1a8-cf4edfd72085" />
          </serviceTrigger>
          <serviceTrigger action="start" subtype="RPC_INTERFACE_EVENT" type="NetworkEndpointEvent">
            <triggerData type="string" value="D09BDEB5-6171-4A34-BFE2-06FA82652568:fdd099c6-df06-4904-83b4-a87a27903c70" />
          </serviceTrigger>
          <serviceTrigger action="start" subtype="WNF_STATE_CHANGE" type="WnfStateEvent">
            <triggerData type="binary" value="7508bca33e06830d" />
          </serviceTrigger>
          <failureActions resetPeriod="86400">
            <actions>
              <action delay="5000" type="restartService" />
              <action delay="5000" type="restartService" />
              <action delay="300000" type="restartService" />
            </actions>
          </failureActions>
        </serviceData>
      </categoryInstance>
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootCritical" />
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootRecovery" />
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="SvcHost" />
      <categoryInstance subcategory="LocalSystemNetworkRestricted">
        <serviceGroup position="last" serviceName="NcbService" />
      </categoryInstance>
    </categoryMembership>
  </memberships>
  <instrumentation>
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events" xmlns:win="http://manifests.microsoft.com/win/2004/08/windows/events" xmlns:xs="http://www.w3.org/2001/XMLSchema">
      <provider guid="{3EB875EB-8F4A-4800-A00B-E484C97D7551}" message="$(string.EventProviderName)" messageFileName="%windir%\system32\ncbservice.dll" name="Microsoft-Windows-Network-Connection-Broker" resourceFileName="%windir%\system32\ncbservice.dll" symbol="NetworkConnectionBrokerEtwProviderGuid">
        <channels>
          <channel chid="NcbTrace" enabled="false" name="Microsoft-Windows-Network-Connection-Broker" type="Analytic">
            <publishing>
              <level>0xFF</level>
            </publishing>
          </channel>
        </channels>
      </provider>
      <cmi />
    </events>
  </instrumentation>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NcbService\Parameters">
      <registryValue name="ServiceDll" valueType="REG_EXPAND_SZ" value="%SystemRoot%\System32\ncbservice.dll" />
      <registryValue name="ServiceDllUnloadOnStop" valueType="REG_DWORD" value="0x00000001" />
      <securityDescriptor name="NCBSERVICE_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NcbService\NCB">
      <securityDescriptor name="NCBSERVICE_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BackgroundModel\Brokers\{fdd099c6-df06-4904-83b4-a87a27903c70}">
      <registryValue name="ServerAuth" valueType="REG_BINARY" value="0100048000000000000000000000000014000000020030000100000000002800000000E0010600000000000550000000C8D5E3BCED4F289AAA9C910463A526D70AFD37F7" />
      <registryValue name="ServerPrincipal" valueType="REG_BINARY" value="010100000000000512000000" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BackgroundModel\EventSettings\402">
      <registryValue name="BatterySaverOverride" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="TimeCritical" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="RescheduleOnCancel" valueType="REG_DWORD" value="0x00000000" />
      <registryValue name="RescheduleOnAbort" valueType="REG_DWORD" value="0x00000000" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="NCBSERVICE_SDDL" sddl="D:P(A;CI;GA;;;BA)(A;CI;GR;;;BU)(A;CI;GA;;;SY)(A;;RCCCDCLCSDFRGWKRKWSW;;;S-1-5-80-3169048008-2586333165-76651690-3609634147-4147641610)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description9" value="Network Connection Broker service SD" />
        <string id="displayName" value="NcbService" />
        <string id="displayName1" value="NCB" />
        <string id="displayName5" value="WRP_FILE_DEFAULT_SDDL" />
        <string id="description6" value="Default SDDL for Windows Resource Protected file" />
        <string id="displayName9" value="NCBSERVICE_SDDL" />
        <string id="EventProviderName" value="Microsoft-Windows-Network-Connection-Broker" />
        <string id="EventNcbApiStatusMessage" value="%1 - Status : %2" />
        <string id="EventNcbApiLogMessage" value="%1" />
        <string id="EventNcbReference" value="Reference: %1 -RefCount : %2,  file: %3 line: %4" />
        <string id="EventNcbReferenceContext" value="Reference context: %1 -RefCount : %2,  file: %3 line: %4" />
        <string id="EventNcbDereferenceContext" value="Dereference context: %1 -RefCount : %2,  file: %3 line: %4" />
        <string id="EventNcbDereference" value="Dereference: %1 -RefCount : %2,  file: %3 line: %4" />
        <string id="EventNcbKapiRegister" value="Provider registration completed with context %1 and status %2" />
        <string id="EventNcbKapiDeregister" value="Provider deregistration completed with context %1 and status %2" />
        <string id="EventNcbKapiRundown" value="Provider rundown completed with context %1 and status %2" />
        <string id="EventNcbKapiUpdateKaSample" value="Update sample completed for context %1, provider %2, value %6, value type %7 with status %9" />
        <string id="EventNcbKapiNetworkChange" value="Network change occured, new value = %7, new value type = %8" />
        <string id="EventNcbKapiNotifyingProviders" value="Collecting provider %1 with request holder %2 for notification" />
        <string id="EventNcbKapiReceiveKaUpdateRequest" value="Accepting update request for provider %1 finished with status %6" />
        <string id="EventNcbKapiReceiveKaUpdateRequestCompletion" value="Completing update request for provider %1 finished with status %6" />
        <string id="EventNcbKapiProviderCreate" value="Provider %1 created with refcount %2" />
        <string id="EventNcbKapiProviderDestroy" value="Provider %1 destroyed" />
        <string id="EventNcbKapiProviderReference" value="Provider %1 referenced, the previous refcount was %2" />
        <string id="EventNcbKapiProviderDereference" value="Provider %1 dereferenced, the previous refcount was %2" />
        <string id="EventNcbKamTimerUpdate" value="%1 updated timer values - %n app input value %2 current timeout value %3 stored timeout value %4 wns test timeout value %5" />
        <string id="EventNcbApplicationRestart" value="CCReset event occurred of type ApplicationRestart for package: %1 and fired: %2" />
        <string id="EventSbStartTrigger" value="Socket Broker: Registered trigger notifications for event id %1 and application name %2" />
        <string id="EventSbStopTrigger" value="Socket Broker: De-Registered trigger notifications for event id %1 and application name %2" />
        <string id="EventSbTransferOwnership" value="Socket Broker: Application %3 is transferring ownership of a socket %2 with address family %4, socket type %5, protocol %6, tcp listener %7 and event id %1" />
        <string id="EventSbRetrieveSocket" value="Socket Broker: Application %3 is retrieving socket %2 for event id %1" />
        <string id="EventSbBiCreateEvent" value="Socket Broker: BICreateEvent is called for event id %1 and application %2" />
        <string id="EventSbBiEnableEvent" value="Socket Broker: BIEnableEvent is called for event id %1, application %2 and call reason %3" />
        <string id="EventSbBiDisableEvent" value="Socket Broker: BIDisableEvent is called for event id %1, application %2 and call reason %3" />
        <string id="EventSbBiDeleteEvent" value="Socket Broker: BIDeleteEvent is called for event id %1, application %2 and call reason %3" />
        <string id="EventSbBiNotify" value="Socket Broker: Notifying background task for event id %1, socket id %2, socket type %3, trigger reason %4 and status %5" />
        <string id="EventSbCreatePushEnabledContext" value="Socket Broker: CreatePushEnabledContext for event id %1 returned %2" />
        <string id="EventSbRetrieveContext" value="Socket Broker: RetrieveContext for event id %1 and socket id %2 returned %3" />
        <string id="EventSbEnumSockets" value="Socket Broker: EnumerateSockets for application name %1 returned status %2 with sockets %3" />
        <string id="Keyword.Aoac" value="Aoac" />
      </stringTable>
    </resources>
  </localization>
</assembly>
