Spreadsheet: 172108b0-d8c1-4d9d-a0da-efbe7bc675e0
Sheet: Hyper-V

Installed Files
Component | Resource Files | Description
C:\ProgramData\Microsoft\Event Viewer\Views\ServerRoles | Virtualization.Events.xml
C:\ProgramData\Microsoft\Windows\Hyper-V | InitialStore.xml
C:\Users\Public\Documents\Blank floppy disk | Blank.vfd
C:\Windows\inf | wnetvsc.inf
 | ws3cap.inf
 | wstorflt.inf
 | wstorvsc.inf
 | wstorvsp.inf
 | wvid.inf
 | wvmbus.inf
 | wvmbushid.inf
 | wvmbusvideo.inf
 | wvmic.inf
 | wvms_mp.inf
 | wvms_pp.inf
C:\Windows\Help\mui\0409 | virtual_help.chm
C:\Windows\Help\Windows\en-US | virtsrv_start.h1s | Compiled Help file for Hyper-V
 | virtual_help.h1s | Compiled Help file for Hyper-V
[NAME] | hvax64.exe | Hyper-V hypervisor, AMD version
 | hvix64.exe | Hyper-V hypervisor, Intel version
 | hypervisor.mof
 | IcCoinstall.dll
 | nvspwmi.dll | Virtual network switch WMI provider
 | rdp4vs.dll | Virtual machine remote services API
 | [NAME]
 | removehypervisor.mof
 | synthnic.dll | Microsoft synthetic network card
 | synthstor.dll | Microsoft synthetic storage adapter
 | vhdsvc.dll | Virtual hard disk management service DLL
 | vid.dll | Hyper-V infrastructure driver library
 | vmbusCoinstaller.dll
 | vmbuspipe.dll | Virtual machine bus user mode pipe DLL
 | vmbusvdev.dll | Microsoft virtual machine bus device
 | vmbusvideod.dll
 | vmclusex.dll | [NAME] extension DLL
 | vmclusres.dll | Microsoft virtual machine failover clustering resource DLL
 | vmdCoinstall.dll | Hyper-V integration components coinstaller
 | vmicheartbeat.dll | Virtual machine integration component heartbeat
 | vmickvpexchange.dll | Virtual machine integration component KvpExchange
 | vmicshutdown.dll | Virtual machine integration component shutdown
 | vmicsvc.exe | Virtual machine integration component service
 | vmictimeprovider.dll | Virtual machine integration component time sync provider library
 | [NAME] | Virtual machine integration component time sync
 | vmicvss.dll | Virtual machine integration component VSS
 | vmms.exe | Management service for Microsoft Hyper-V
 | vmprox.dll | Hyper-V component proxy
 | vmsntfy.dll | Virtual machine switch notify DLL
 | vmwp.exe | Virtual machine worker process
 | vmwpctrl.dll | Virtual machine moniker module
 | vsconfig.dll | Virtual machine configuration module
 | WindowsVirtualization.mof
 | WindowsVirtualizationUninstall.mof
C:\Windows\System32\drivers | hvboot.sys | [NAME] boot driver
 | isoparser.sys
 | netvsc50.sys
 | netvsc60.sys
 | passthruparser.sys
 | s3cap.sys
 | storflt.sys
 | storvsc.sys
 | storvsp.sys
 | vhdparser.sys
 | vid.sys | Hyper-V infrastructure driver
 | vmbus.sys | Virtual machine bus
 | vmbushid.sys
 | vmbusvideom.sys
 | vmswitch.sys | Network virtualization service provider
 | winhv.sys | Windows hypervisor interface driver
[NAME] | isoparser.sys.mui
 | hvboot.sys.mui
 | vmbus.sys.mui
 | netvsc50.sys.mui
 | [NAME]
 | passthruparser.sys.mui
 | storflt.sys.mui
 | storvsp.sys.mui
 | vhdparser.sys.mui
C:\Windows\System32\DriverStore\en-US | wnetvsc.inf_loc
 | ws3cap.inf_loc
 | wstorflt.inf_loc
 | wstorvsp.inf_loc
 | wvid.inf_loc
 | wvmbus.inf_loc
 | wvmbushid.inf_loc
 | wvmbusvideo.inf_loc
 | wvmic.inf_loc
 | wvms_mp.inf_loc
 | wvms_pp.inf_loc
c:\Windows\System32\en-US | nvspwmi.dll.mui
 | RemoteFileBrowse.dll.mui
 | SynthNic.dll.mui
 | SynthStor.dll.mui
 | vhdsvc.dll.mui
 | vmclusex.dll.mui
 | vmclusres.dll.mui
 | vmicheartbeat.dll.mui
 | vmickvpexchange.dll.mui
 | vmicshutdown.dll.mui
 | vmictimesync.dll.mui
 | vmicvss.dll.mui
 | vmms.exe.mui
 | vmswitch.sys.mui
 | vmwp.exe.mui
 | vsconfig.dll.mui
 | WindowsVirtualization.mfl
 | [NAME]
 | SnapInAbout.dll.mui
 | virtmgmt.msc
C:\Program Files\Hyper-V | InspectVhdDialog.exe | Inspect VHD dialog box
 | InspectVhdDialog.resources.exe
 | Microsoft.Virtualization.Client.dll | Virtualization client
 | Microsoft.Virtualization.Client.resources.dll
 | Microsoft.Virtualization.Client.Management.dll | Virtualization management
 | Microsoft.Virtualization.Client.Management.resources.dll
 | Microsoft.Virtualization.Client.RdpClientAxHost.dll
 | Microsoft.Virtualization.Client.RdpClientInterop.dll
 | [NAME] | Virtualization settings
 | Microsoft.Virtualization.Client.Settings.resources.dll
 | Microsoft.Virtualization.Client.VMBrowser.dll | Virtualization management console
 | Microsoft.Virtualization.Client.VMBrowser.resources.dll
 | [NAME] | Virtualization wizards
 | Microsoft.Virtualization.Client.Wizards.resources
 | SnapInAbout.dll | Virtualization UI DLL snap-in information for MUI
 | virtmgmt.msc | Virtualization management console
 | vmconnect.exe | Virtual machine connection
 | vmbus.cat
 | vmstorage.cat
 | vmbusvideo.cat
 | vmic.cat
 | netvsc.cat
 | vmbushid.cat
 | vmginst.cat
Running Services
Service Name | Display Name | Executable path | Type
VMMS | Virtual Machine Management Service | c:\Windows\system32\vmms.exe | Automatic
vhdsvc | Hyper-V Image Management Service | c:\Windows\system32\svchost.exe -k virtsvcs | Automatic
[NAME] | Hyper-V Networking Management Service | c:\Windows\system32\svchost.exe -k [NAME] | Automatic
Required Ports
Rule Name | Description | Port | Path
[NAME] (Async-In) | Inbound rule for [NAME]-V to allow asynchronous WMI traffic | TCP any | %systemroot%\system32\wbem\unsecapp.exe
[NAME] (DCOM-In) | Inbound rule for [NAME]-V to allow WMI management using DCOM | TCP 135 | %SystemRoot%\system32\svchost.exe
[NAME] (TCP-In) | Inbound rule for [NAME]-V to allow remote WMI traffic | TCP any | %SystemRoot%\system32\svchost.exe
[NAME] (TCP-Out) | Outbound rule for Hyper-V to allow remote WMI traffic | TCP any | %SystemRoot%\system32\svchost.exe
Hyper-V (RPC) | Inbound rule for [NAME]-V to allow remote management using RPC/TCP | Dynamic RPC | System
Hyper-V (RPC-EPMAP) | Inbound rule for RPCSS service  to allow RPC/TCP traffic for Hyper-V | RPC Endpoint Mapper | System
Hyper-V (REMOTE_DESKTOP_TCP_IN) | Inbound rule for [NAME]-V to allow remote connection to virtual machine. | TCP 2179 | %systemroot%\system32\vmms.exe
Hyper-V Management Clients - WMI (Async-In) | Inbound rule for Hyper-V Clients to allow asynchronous WMI traffic | TCP any | %systemroot%\system32\wbem\unsecapp.exe
Hyper-V Management Clients - WMI (DCOM-In) | Inbound rule for Hyper-V Clients to allow WMI management via DCOM | TCP 135 | %SystemRoot%\system32\svchost.exe
Hyper-V Management Clients - WMI (TCP-In) | Inbound rule for Hyper-V Clients to allow remote WMI traffic | TCP any | %SystemRoot%\system32\svchost.exe
Hyper-V Management Clients - WMI (TCP-Out) | Outbound rule for Hyper-V Clients to allow remote WMI traffic | TCP any | %SystemRoot%\system32\svchost.exe