<?xml version="1.0" encoding="UTF-8"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-WMI-Core-ProviderHost" version="6.1.7601.17514" processorArchitecture="x86" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name="WmiDcPrv.dll" destinationPath="$(runtime.system32)\wbem\" sourceName="WmiDcPrv.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">HNWei4iJyTtV9gDaGnJGgQ6Oq3Je/vgDJ6yWNErFlqY=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="WmiPrvSD.dll" destinationPath="$(runtime.system32)\wbem\" sourceName="WmiPrvSD.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">2+yGabG4+mh1CxcAjEMosiP4Jj6+AsVQeAkmwj0419M=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="WmiPrvSE.exe" destinationPath="$(runtime.system32)\wbem\" sourceName="WmiPrvSE.exe" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">y+I5J5LSCeFeRKwp6Qb/3V+/bu2Lqw2X1m4QmrLFxW4=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <registryKeys>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{F5F75737-2843-4F22-933D-C76A97CDA62F}\InprocServer32\" owner="false">
      <registryValue name="" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmidcprv.dll" operationHint="replace" owner="true" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" operationHint="replace" owner="true" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{F5F75737-2843-4F22-933D-C76A97CDA62F}\NotInsertable\" owner="false" />
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{F5F75737-2843-4F22-933D-C76A97CDA62F}\" owner="false">
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem Decoupled Basic Event Provider" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{4DE225BF-CF59-4CFC-85F7-68B90F185355}\NotInsertable\" owner="false" />
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{4DE225BF-CF59-4CFC-85F7-68B90F185355}\InprocServer32\" owner="false">
      <registryValue name="" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmiprvsd.dll" operationHint="replace" owner="true" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" operationHint="replace" owner="true" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{4DE225BF-CF59-4CFC-85F7-68B90F185355}\" owner="false">
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{F5A55D36-8750-432C-AB52-AD49A016EABC}\NotInsertable\" owner="false" />
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{F5A55D36-8750-432C-AB52-AD49A016EABC}\InprocServer32\" owner="false">
      <registryValue name="" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmiprvsd.dll" operationHint="replace" owner="true" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" operationHint="replace" owner="true" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{F5A55D36-8750-432C-AB52-AD49A016EABC}\" owner="false">
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem Binding Factory" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{7F598975-37E0-4A67-A992-116680F0CEDA}\NotInsertable\" owner="false" />
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{7F598975-37E0-4A67-A992-116680F0CEDA}\InprocServer32\" owner="false">
      <registryValue name="" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmiprvsd.dll" operationHint="replace" owner="true" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" operationHint="replace" owner="true" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{7F598975-37E0-4A67-A992-116680F0CEDA}\" owner="false">
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem Self Instrumentation" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{8BEBCE8B-1AF0-4323-8B4D-36994567CAE1}\NotInsertable\" owner="false" />
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{8BEBCE8B-1AF0-4323-8B4D-36994567CAE1}\InprocServer32\" owner="false">
      <registryValue name="" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmiprvsd.dll" operationHint="replace" owner="true" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" operationHint="replace" owner="true" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{8BEBCE8B-1AF0-4323-8B4D-36994567CAE1}\" owner="false">
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem InProc Factory" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}" owner="false">
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem Host" operationHint="replace" owner="true" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value="01000480840000009000000000000000140000000200700005000000000314000100000001010000000000050400000000031400010000000101000000000005120000000003140001000000010100000000000513000000000314000100000001010000000000051400000000031800010000000102000000000005200000002002000001010000000000051200000001020000000000052000000020020000" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{1F87137D-0E7C-44d5-8C73-4EFFB68962F2}" owner="false">
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem Secured Host" operationHint="replace" owner="true" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value="01000480840000009000000000000000140000000200700005000000000314000100000001010000000000050400000000031400010000000101000000000005120000000003140001000000010100000000000513000000000314000100000001010000000000051400000000031800010000000102000000000005200000002002000001010000000000051200000001020000000000052000000020020000" operationHint="replace" owner="true" />
      <registryValue name="AppIDFlags" valueType="REG_DWORD" value="0x00000002" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}" owner="false">
      <registryValue name="AppId" valueType="REG_SZ" value="{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}" operationHint="replace" owner="true" />
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem Host" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\LocalServer32" owner="false">
      <registryValue name="" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmiprvse.exe" operationHint="replace" owner="true" />
      <registryValue name="ServerExecutable" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmiprvse.exe" operationHint="replace" owner="true" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\NotInsertable" owner="false" />
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winmgmt\Parameters\" owner="false">
      <registryValue name="ServiceDllUnloadOnStop" valueType="REG_DWORD" value="0x00000001" operationHint="replace" owner="true" />
      <securityDescriptor name="wbem-reg" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{1F87137D-0E7C-44d5-8C73-4EFFB68962F2}" owner="false">
      <registryValue name="AppId" valueType="REG_SZ" value="{1F87137D-0E7C-44d5-8C73-4EFFB68962F2}" operationHint="replace" owner="true" />
      <registryValue name="" valueType="REG_SZ" value="Microsoft WMI Provider Subsystem Secured Host" operationHint="replace" owner="true" />
      <securityDescriptor name="WRP_KEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{1F87137D-0E7C-44d5-8C73-4EFFB68962F2}\LocalServer32" owner="false">
      <registryValue name="" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmiprvse.exe -secured" operationHint="replace" owner="true" />
      <registryValue name="ServerExecutable" valueType="REG_EXPAND_SZ" value="%systemroot%\system32\wbem\wmiprvse.exe" operationHint="replace" owner="true" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{1F87137D-0E7C-44d5-8C73-4EFFB68962F2}\NotInsertable" owner="false" />
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="wbem-reg" sddl="D:P(A;CIOI;GRGX;;;BU)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
          <securityDescriptorDefinition name="WRP_KEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="Provider Host : Core component of WMI V1 or WMI Classic.  Most other WMI components and providers depend on this component." />
        <string id="description2" value="wbem Registry Key Security" />
        <string id="description4" value="This descriptor goes on files like mofcomp.exe and smi2smir.exe and wmic.exe" />
        <string id="description5" value="wbem Registry Key WRP Security" />
        <string id="displayName" value="WMI Provider Host" />
        <string id="displayName2" value="wbem Registry Key" />
        <string id="displayName4" value="executable file security" />
        <string id="displayName5" value="wbem Registry Key WRP" />
      </stringTable>
    </resources>
  </localization>
</assembly>