dissect.hypervisor 3.21.dev2__tar.gz → 3.21.dev4__tar.gz

{dissect_hypervisor-3.21.dev2 → dissect_hypervisor-3.21.dev4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dissect.hypervisor
-Version: 3.21.dev2
+Version: 3.21.dev4
 Summary: A Dissect module implementing parsers for various hypervisor disk, backup and configuration files
 Author-email: Dissect Team <dissect@fox-it.com>
 License-Expression: AGPL-3.0-or-later

dissect_hypervisor-3.21.dev4/dissect/hypervisor/descriptor/vbox.py

@@ -0,0 +1,226 @@
+from __future__ import annotations
+
+from datetime import datetime
+from functools import cached_property
+from typing import TYPE_CHECKING, TextIO
+from uuid import UUID
+
+from defusedxml import ElementTree
+
+if TYPE_CHECKING:
+    from xml.etree.ElementTree import Element
+
+NS = "{http://www.virtualbox.org/}"
+
+
+class VBox:
+    """VirtualBox XML descriptor parser.
+
+    Args:
+        fh: A file-like object of the VirtualBox XML descriptor.
+    """
+
+    def __init__(self, fh: TextIO):
+        self._xml: Element = ElementTree.fromstring(fh.read())
+        if self._xml.tag != f"{NS}VirtualBox":
+            raise ValueError("Invalid VirtualBox XML descriptor: root element is not VirtualBox")
+
+        if (machine := self._xml.find(f"./{NS}Machine")) is None:
+            raise ValueError("Invalid VirtualBox XML descriptor: no Machine element found")
+
+        if machine.find(f"./{NS}Hardware") is None:
+            raise ValueError("Invalid VirtualBox XML descriptor: no Hardware element found")
+
+        self.machine = Machine(self, machine)
+
+    def __repr__(self) -> str:
+        return f"<VBox uuid={self.uuid} name={self.name}>"
+
+    @property
+    def uuid(self) -> UUID | None:
+        """The VM UUID."""
+        return self.machine.uuid
+
+    @property
+    def name(self) -> str | None:
+        """The VM name."""
+        return self.machine.name
+
+    @property
+    def media(self) -> dict[UUID, HardDisk]:
+        """The media (disks) registry."""
+        return self.machine.media
+
+    @property
+    def hardware(self) -> Hardware:
+        """The current machine hardware state."""
+        return self.machine.hardware
+
+    @property
+    def snapshots(self) -> dict[UUID, Snapshot]:
+        """All snapshots."""
+        return self.machine.snapshots
+
+
+class Machine:
+    def __init__(self, vbox: VBox, element: Element):
+        self.vbox = vbox
+        self.element = element
+
+    def __repr__(self) -> str:
+        return f"<Machine uuid={self.uuid} name={self.name}>"
+
+    @property
+    def uuid(self) -> UUID:
+        """The machine UUID."""
+        return UUID(self.element.get("uuid").strip("{}"))
+
+    @property
+    def name(self) -> str:
+        """The machine name."""
+        return self.element.get("name")
+
+    @property
+    def current_snapshot(self) -> UUID | None:
+        """The current snapshot UUID."""
+        if (value := self.element.get("currentSnapshot")) is not None:
+            return UUID(value.strip("{}"))
+        return None
+
+    @cached_property
+    def media(self) -> dict[UUID, HardDisk]:
+        """The media (disks) registry."""
+        result = {}
+
+        stack = [(None, element) for element in self.element.find(f"./{NS}MediaRegistry/{NS}HardDisks")]
+        while stack:
+            parent, element = stack.pop()
+            hdd = HardDisk(self, element, parent)
+            result[hdd.uuid] = hdd
+
+            stack.extend([(hdd, child) for child in element.findall(f"./{NS}HardDisk")])
+
+        return result
+
+    @cached_property
+    def hardware(self) -> Hardware:
+        """The machine hardware state."""
+        return Hardware(self.vbox, self.element.find(f"./{NS}Hardware"))
+
+    @cached_property
+    def snapshots(self) -> dict[UUID, Snapshot]:
+        """All snapshots."""
+        result = {}
+
+        if (element := self.element.find(f"./{NS}Snapshot")) is None:
+            return result
+
+        stack = [(None, element)]
+        while stack:
+            parent, element = stack.pop()
+            snapshot = Snapshot(self.vbox, element, parent)
+            result[snapshot.uuid] = snapshot
+
+            if (snapshots := element.find(f"./{NS}Snapshots")) is not None:
+                stack.extend([(snapshot, child) for child in list(snapshots)])
+
+        return result
+
+    @property
+    def parent(self) -> Snapshot | None:
+        if (uuid := self.current_snapshot) is not None:
+            return self.vbox.snapshots[uuid]
+        return None
+
+
+class HardDisk:
+    def __init__(self, vbox: VBox, element: Element, parent: HardDisk | None = None):
+        self.vbox = vbox
+        self.element = element
+        self.parent = parent
+
+    def __repr__(self) -> str:
+        return f"<HardDisk uuid={self.uuid} location={self.location}>"
+
+    @property
+    def uuid(self) -> UUID:
+        """The disk UUID."""
+        return UUID(self.element.get("uuid").strip("{}"))
+
+    @property
+    def location(self) -> str:
+        """The disk location."""
+        return self.element.get("location")
+
+    @property
+    def type(self) -> str | None:
+        """The disk type."""
+        return self.element.get("type")
+
+    @property
+    def format(self) -> str:
+        """The disk format."""
+        return self.element.get("format")
+
+    @cached_property
+    def properties(self) -> dict[str, str]:
+        """The disk properties."""
+        return {prop.get("name"): prop.get("value") for prop in self.element.findall(f"./{NS}Property")}
+
+    @property
+    def is_encrypted(self) -> bool:
+        """Whether the disk is encrypted."""
+        disk = self
+        while disk is not None:
+            if "CRYPT/KeyId" in disk.properties or "CRYPT/KeyStore" in disk.properties:
+                return True
+            disk = disk.parent
+
+        return False
+
+
+class Snapshot:
+    def __init__(self, vbox: VBox, element: Element, parent: Snapshot | Machine | None = None):
+        self.vbox = vbox
+        self.element = element
+        self.parent = parent
+
+    def __repr__(self) -> str:
+        return f"<Snapshot uuid={self.uuid} name={self.name}>"
+
+    @property
+    def uuid(self) -> UUID:
+        """The snapshot UUID."""
+        return UUID(self.element.get("uuid").strip("{}"))
+
+    @property
+    def name(self) -> str:
+        """The snapshot name."""
+        return self.element.get("name")
+
+    @property
+    def ts(self) -> datetime:
+        """The snapshot timestamp."""
+        return datetime.strptime(self.element.get("timeStamp"), "%Y-%m-%dT%H:%M:%S%z")
+
+    @cached_property
+    def hardware(self) -> Hardware:
+        """The snapshot hardware state."""
+        return Hardware(self.vbox, self.element.find(f"./{NS}Hardware"))
+
+
+class Hardware:
+    def __init__(self, vbox: VBox, element: Element):
+        self.vbox = vbox
+        self.element = element
+
+    def __repr__(self) -> str:
+        return f"<Hardware disks={len(self.disks)}>"
+
+    @property
+    def disks(self) -> list[HardDisk]:
+        """All attached hard disks."""
+        images = self.element.findall(
+            f"./{NS}StorageControllers/{NS}StorageController/{NS}AttachedDevice[@type='HardDisk']/{NS}Image"
+        )
+        return [self.vbox.media[UUID(image.get("uuid").strip("{}"))] for image in images]

{dissect_hypervisor-3.21.dev2 → dissect_hypervisor-3.21.dev4}/dissect/hypervisor/disk/vmdk.py

@@ -535,8 +535,10 @@ def open_parent(path: Path, filename_hint: str) -> VMDK:
         hint_path, _, filename = filename_hint.rpartition("/")
         filepath = path.joinpath(filename)
         if not filepath.exists():
-            _, _, hint_path_name = hint_path.rpartition("/")
-            filepath = path.parent.joinpath(hint_path_name).joinpath(filename)
+            filepath = path.joinpath(filename_hint)
+            if not filepath.exists():
+                _, _, hint_path_name = hint_path.rpartition("/")
+                filepath = path.parent.joinpath(hint_path_name).joinpath(filename)
         vmdk = VMDK(filepath)
     except Exception as err:
         raise IOError(f"Failed to open parent disk with hint {filename_hint} from path {path}: {err}")

{dissect_hypervisor-3.21.dev2 → dissect_hypervisor-3.21.dev4}/dissect.hypervisor.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dissect.hypervisor
-Version: 3.21.dev2
+Version: 3.21.dev4
 Summary: A Dissect module implementing parsers for various hypervisor disk, backup and configuration files
 Author-email: Dissect Team <dissect@fox-it.com>
 License-Expression: AGPL-3.0-or-later

{dissect_hypervisor-3.21.dev2 → dissect_hypervisor-3.21.dev4}/dissect.hypervisor.egg-info/SOURCES.txt

@@ -44,9 +44,11 @@ dissect/hypervisor/util/__init__.py
 dissect/hypervisor/util/envelope.py
 dissect/hypervisor/util/vmtar.py
 tests/__init__.py
-tests/conftest.py
+tests/_util.py
 tests/_data/descriptor/hyperv/test.VMRS
 tests/_data/descriptor/hyperv/test.vmcx
+tests/_data/descriptor/vbox/GOAD-DC01.vbox
+tests/_data/descriptor/vbox/encrypted.vbox
 tests/_data/descriptor/vmx/encrypted.vmx
 tests/_data/disk/asif/basic.asif.gz
 tests/_data/disk/hdd/expanding.hdd/DiskDescriptor.xml

dissect_hypervisor-3.21.dev4/tests/_data/descriptor/vbox/GOAD-DC01.vbox

@@ -0,0 +1,201 @@
+<?xml version="1.0"?>
+<!--
+** DO NOT EDIT THIS FILE.
+** If you make changes to this file while any VirtualBox related application
+** is running, your changes will be overwritten later, without taking effect.
+** Use VBoxManage or the VirtualBox Manager GUI to make changes.
+**
+** Written by VirtualBox 7.2.4_RPMFUSION (r170995)
+-->
+<VirtualBox xmlns="http://www.virtualbox.org/" version="1.19-linux">
+  <Machine uuid="{a6277950-3d1b-45d3-b2fd-dc1f385027e1}" name="GOAD-DC01" OSType="Windows2016_64" currentSnapshot="{264ccd7e-9ffd-45ba-bd0e-4e1968d3355a}" snapshotFolder="Snapshots" lastStateChange="2025-12-19T21:00:43Z">
+    <MediaRegistry>
+      <HardDisks>
+        <HardDisk uuid="{0898f36f-01c3-4b43-8aeb-36ba7adaef95}" location="WindowsServer2019-disk001.vmdk" format="VMDK" type="Normal">
+          <HardDisk uuid="{3c72ec80-dc73-4448-a63e-97970cdd87e5}" location="Snapshots/{3c72ec80-dc73-4448-a63e-97970cdd87e5}.vmdk" format="VMDK">
+            <HardDisk uuid="{e6800503-8273-4f16-b584-c7ba2c1df698}" location="Snapshots/{e6800503-8273-4f16-b584-c7ba2c1df698}.vmdk" format="VMDK"/>
+          </HardDisk>
+          <!--
+          ** I ignored the big warning above and edited this file anyway. Yes, I'm kind of a rebel.
+          ** Don't tell VirtualBox about it, they get upset.
+          ** Manually add a "tree" of snapshots for testing purposes.
+          -->
+          <HardDisk uuid="{35bf5129-1caa-4117-b20a-d73868d9d5d2}" location="Snapshots/{35bf5129-1caa-4117-b20a-d73868d9d5d2}.vmdk" format="VMDK">
+            <HardDisk uuid="{706a96fe-0e11-4985-af32-7561d26612d4}" location="Snapshots/{706a96fe-0e11-4985-af32-7561d26612d4}.vmdk" format="VMDK"/>
+          </HardDisk>
+        </HardDisk>
+      </HardDisks>
+    </MediaRegistry>
+    <Snapshot uuid="{95b1572d-c893-48f0-9bc9-6a01a0fd2cb6}" name="push_1766163705_7292" timeStamp="2025-12-19T17:01:46Z">
+      <Hardware>
+        <Memory RAMSize="3000"/>
+        <Boot>
+          <Order position="1" device="HardDisk"/>
+          <Order position="2" device="DVD"/>
+          <Order position="3" device="None"/>
+          <Order position="4" device="None"/>
+        </Boot>
+        <Display VRAMSize="128"/>
+        <RemoteDisplay enabled="true">
+          <VRDEProperties>
+            <Property name="TCP/Address" value="127.0.0.1"/>
+            <Property name="TCP/Ports" value="5902"/>
+          </VRDEProperties>
+        </RemoteDisplay>
+        <Firmware/>
+        <BIOS>
+          <IOAPIC enabled="true"/>
+          <SmbiosUuidLittleEndian enabled="true"/>
+        </BIOS>
+        <Network>
+          <Adapter slot="0" enabled="true" MACAddress="0800277AA2FC" type="82540EM">
+            <NAT localhost-reachable="true">
+              <DNS use-proxy="true"/>
+              <Forwarding name="ssh" proto="1" hostip="127.0.0.1" hostport="2222" guestport="22"/>
+              <Forwarding name="winrm" proto="1" hostip="127.0.0.1" hostport="55985" guestport="5985"/>
+              <Forwarding name="winrm-ssl" proto="1" hostip="127.0.0.1" hostport="55986" guestport="5986"/>
+            </NAT>
+          </Adapter>
+          <Adapter slot="1" enabled="true" MACAddress="0800278CC821" type="82540EM">
+            <DisabledModes>
+              <NAT localhost-reachable="true"/>
+              <InternalNetwork name="intnet"/>
+              <NATNetwork name="NatNetwork"/>
+            </DisabledModes>
+            <HostOnlyInterface name="vboxnet0"/>
+          </Adapter>
+        </Network>
+        <AudioAdapter driver="ALSA"/>
+        <Clipboard mode="Bidirectional"/>
+        <StorageControllers>
+          <StorageController name="IDE Controller" type="PIIX4" PortCount="2" useHostIOCache="true" Bootable="true">
+            <AttachedDevice type="HardDisk" hotpluggable="false" port="0" device="0">
+              <Image uuid="{0898f36f-01c3-4b43-8aeb-36ba7adaef95}"/>
+            </AttachedDevice>
+          </StorageController>
+        </StorageControllers>
+        <RTC localOrUTC="UTC"/>
+        <CPU count="2">
+          <HardwareVirtExLargePages enabled="false"/>
+          <PAE enabled="true"/>
+          <LongMode enabled="true"/>
+        </CPU>
+      </Hardware>
+      <Snapshots>
+        <Snapshot uuid="{264ccd7e-9ffd-45ba-bd0e-4e1968d3355a}" name="push_1766170151_8843" timeStamp="2025-12-19T18:49:11Z">
+          <Hardware>
+            <Memory RAMSize="3000"/>
+            <Boot>
+              <Order position="1" device="HardDisk"/>
+              <Order position="2" device="DVD"/>
+              <Order position="3" device="None"/>
+              <Order position="4" device="None"/>
+            </Boot>
+            <Display VRAMSize="128"/>
+            <RemoteDisplay enabled="true">
+              <VRDEProperties>
+                <Property name="TCP/Address" value="127.0.0.1"/>
+                <Property name="TCP/Ports" value="5902"/>
+              </VRDEProperties>
+            </RemoteDisplay>
+            <Firmware/>
+            <BIOS>
+              <IOAPIC enabled="true"/>
+              <SmbiosUuidLittleEndian enabled="true"/>
+            </BIOS>
+            <Network>
+              <Adapter slot="0" enabled="true" MACAddress="0800277AA2FC" type="82540EM">
+                <NAT localhost-reachable="true">
+                  <DNS use-proxy="true"/>
+                  <Forwarding name="ssh" proto="1" hostip="127.0.0.1" hostport="2222" guestport="22"/>
+                  <Forwarding name="winrm" proto="1" hostip="127.0.0.1" hostport="55985" guestport="5985"/>
+                  <Forwarding name="winrm-ssl" proto="1" hostip="127.0.0.1" hostport="55986" guestport="5986"/>
+                </NAT>
+              </Adapter>
+              <Adapter slot="1" enabled="true" MACAddress="0800278CC821" type="82540EM">
+                <DisabledModes>
+                  <NAT localhost-reachable="true"/>
+                  <InternalNetwork name="intnet"/>
+                  <NATNetwork name="NatNetwork"/>
+                </DisabledModes>
+                <HostOnlyInterface name="vboxnet0"/>
+              </Adapter>
+            </Network>
+            <AudioAdapter driver="ALSA"/>
+            <Clipboard mode="Bidirectional"/>
+            <StorageControllers>
+              <StorageController name="IDE Controller" type="PIIX4" PortCount="2" useHostIOCache="true" Bootable="true">
+                <AttachedDevice type="HardDisk" hotpluggable="false" port="0" device="0">
+                  <Image uuid="{3c72ec80-dc73-4448-a63e-97970cdd87e5}"/>
+                </AttachedDevice>
+              </StorageController>
+            </StorageControllers>
+            <RTC localOrUTC="UTC"/>
+            <CPU count="2">
+              <HardwareVirtExLargePages enabled="false"/>
+              <PAE enabled="true"/>
+              <LongMode enabled="true"/>
+            </CPU>
+          </Hardware>
+        </Snapshot>
+      </Snapshots>
+    </Snapshot>
+    <Hardware>
+      <Memory RAMSize="3000"/>
+      <Boot>
+        <Order position="1" device="HardDisk"/>
+        <Order position="2" device="DVD"/>
+        <Order position="3" device="None"/>
+        <Order position="4" device="None"/>
+      </Boot>
+      <Display VRAMSize="128"/>
+      <RemoteDisplay enabled="true">
+        <VRDEProperties>
+          <Property name="TCP/Address" value="127.0.0.1"/>
+          <Property name="TCP/Ports" value="5902"/>
+        </VRDEProperties>
+      </RemoteDisplay>
+      <Firmware/>
+      <BIOS>
+        <IOAPIC enabled="true"/>
+        <SmbiosUuidLittleEndian enabled="true"/>
+      </BIOS>
+      <Network>
+        <Adapter slot="0" enabled="true" MACAddress="0800277AA2FC" type="82540EM">
+          <NAT localhost-reachable="true">
+            <DNS use-proxy="true"/>
+            <Forwarding name="ssh" proto="1" hostip="127.0.0.1" hostport="2222" guestport="22"/>
+            <Forwarding name="winrm" proto="1" hostip="127.0.0.1" hostport="55985" guestport="5985"/>
+            <Forwarding name="winrm-ssl" proto="1" hostip="127.0.0.1" hostport="55986" guestport="5986"/>
+          </NAT>
+        </Adapter>
+        <Adapter slot="1" enabled="true" MACAddress="0800278CC821" type="82540EM">
+          <DisabledModes>
+            <NAT localhost-reachable="true"/>
+            <InternalNetwork name="intnet"/>
+            <NATNetwork name="NatNetwork"/>
+          </DisabledModes>
+          <HostOnlyInterface name="vboxnet0"/>
+        </Adapter>
+      </Network>
+      <AudioAdapter driver="ALSA"/>
+      <Clipboard mode="Bidirectional"/>
+      <StorageControllers>
+        <StorageController name="IDE Controller" type="PIIX4" PortCount="2" useHostIOCache="true" Bootable="true">
+          <AttachedDevice type="HardDisk" hotpluggable="false" port="0" device="0">
+            <Image uuid="{e6800503-8273-4f16-b584-c7ba2c1df698}"/>
+          </AttachedDevice>
+        </StorageController>
+      </StorageControllers>
+      <RTC localOrUTC="UTC"/>
+      <CPU count="2">
+        <HardwareVirtExLargePages enabled="false"/>
+        <PAE enabled="true"/>
+        <LongMode enabled="true"/>
+      </CPU>
+    </Hardware>
+    <Groups>
+      <Group name="/GOAD"/>
+    </Groups>
+  </Machine>
+</VirtualBox>

dissect_hypervisor-3.21.dev4/tests/_data/descriptor/vbox/encrypted.vbox

@@ -0,0 +1,103 @@
+<?xml version="1.0"?>
+<!--
+** DO NOT EDIT THIS FILE.
+** If you make changes to this file while any VirtualBox related application
+** is running, your changes will be overwritten later, without taking effect.
+** Use VBoxManage or the VirtualBox Manager GUI to make changes.
+**
+** Written by VirtualBox 7.2.4 (r170995)
+-->
+<VirtualBox xmlns="http://www.virtualbox.org/" version="1.19-linux">
+  <Machine uuid="{366f53dd-1710-434e-8021-1f91b0405b65}" name="encrypted test" OSType="Windows11_64" currentSnapshot="{cfbdc706-6561-44e8-8f3a-236df446b808}" snapshotFolder="Snapshots" lastStateChange="2026-01-20T13:01:05Z">
+    <MediaRegistry>
+      <HardDisks>
+        <HardDisk uuid="{24cdb8e9-35d6-42f2-aa17-c2d78bf1e1de}" location="encrypted test.vdi" format="VDI" type="Normal">
+          <Property name="CRYPT/KeyId" value="encrypted test"/>
+          <Property name="CRYPT/KeyStore" value="U0NORQABQUVTLVhUUzI1Ni1QTEFJTjY0AAAAAAAAAAAAAAAAAABQQktERjItU0hB&#10;MjU2AAAAAAAAAAAAAAAAAAAAAAAAAEAAAACOEfHKuPU9MHJktr3UZAxmuL+epJsk&#10;SRfK3vhbPnb4USAAAABCoUSl+kb0+6OzG8N3wo16bru7UNsjHzIsB+OPBfZUPiBO&#10;AACa0Cbl1wJz09E5i8U10V3xElnY8iAIwEqSwVWpwFPiYsAJDgBAAAAAgcb2cMho&#10;wWkDpje3pQHrn62sH8oTyr4+wXaJoFUEreymEuIXYlnB+jeLjQDWEEIs9DUIXfiP&#10;PWw3Fph9h0a3lA=="/>
+          <HardDisk uuid="{742e6d0f-8896-4aa6-97f4-e05d70e73029}" location="Snapshots/{742e6d0f-8896-4aa6-97f4-e05d70e73029}.vdi" format="VDI"/>
+        </HardDisk>
+        <HardDisk uuid="{1db0b9fe-36c2-44e8-9b7c-61fa5b6d1462}" location="encrypted test_1.vdi" format="VDI" type="Normal"/>
+      </HardDisks>
+    </MediaRegistry>
+    <Snapshot uuid="{cfbdc706-6561-44e8-8f3a-236df446b808}" name="Encryption" timeStamp="2026-01-20T13:01:05Z">
+      <Hardware>
+        <Memory RAMSize="4096"/>
+        <HID Pointing="USBTablet"/>
+        <Display controller="VBoxSVGA" VRAMSize="128"/>
+        <Firmware type="EFI"/>
+        <BIOS>
+          <IOAPIC enabled="true"/>
+          <NVRAM path="Snapshots/2026-01-20T13-01-05-717390000Z.nvram"/>
+          <SmbiosUuidLittleEndian enabled="true"/>
+          <AutoSerialNumGen enabled="true"/>
+        </BIOS>
+        <TrustedPlatformModule type="v2_0" location=""/>
+        <USB>
+          <Controllers>
+            <Controller name="XHCI" type="XHCI"/>
+          </Controllers>
+        </USB>
+        <Network>
+          <Adapter slot="0" enabled="true" MACAddress="0800274C9CFB" type="82540EM">
+            <NAT localhost-reachable="true"/>
+          </Adapter>
+        </Network>
+        <AudioAdapter controller="HDA" useDefault="true" driver="ALSA" enabled="true" enabledOut="true"/>
+        <Clipboard/>
+        <StorageControllers>
+          <StorageController name="SATA" type="AHCI" PortCount="2" useHostIOCache="false" Bootable="true" IDE0MasterEmulationPort="0" IDE0SlaveEmulationPort="1" IDE1MasterEmulationPort="2" IDE1SlaveEmulationPort="3">
+            <AttachedDevice type="HardDisk" hotpluggable="false" port="0" device="0">
+              <Image uuid="{24cdb8e9-35d6-42f2-aa17-c2d78bf1e1de}"/>
+            </AttachedDevice>
+            <AttachedDevice passthrough="false" type="DVD" hotpluggable="false" port="1" device="0"/>
+          </StorageController>
+        </StorageControllers>
+        <CPU count="2">
+          <HardwareVirtExLargePages enabled="false"/>
+          <PAE enabled="false"/>
+          <LongMode enabled="true"/>
+        </CPU>
+      </Hardware>
+    </Snapshot>
+    <Hardware>
+      <Memory RAMSize="4096"/>
+      <HID Pointing="USBTablet"/>
+      <Display controller="VBoxSVGA" VRAMSize="128"/>
+      <Firmware type="EFI"/>
+      <BIOS>
+        <IOAPIC enabled="true"/>
+        <SmbiosUuidLittleEndian enabled="true"/>
+        <AutoSerialNumGen enabled="true"/>
+      </BIOS>
+      <TrustedPlatformModule type="v2_0" location=""/>
+      <USB>
+        <Controllers>
+          <Controller name="XHCI" type="XHCI"/>
+        </Controllers>
+      </USB>
+      <Network>
+        <Adapter slot="0" enabled="true" MACAddress="0800274C9CFB" type="82540EM">
+          <NAT localhost-reachable="true"/>
+        </Adapter>
+      </Network>
+      <AudioAdapter controller="HDA" useDefault="true" driver="ALSA" enabled="true" enabledOut="true"/>
+      <Clipboard/>
+      <StorageControllers>
+        <StorageController name="SATA" type="AHCI" PortCount="3" useHostIOCache="false" Bootable="true" IDE0MasterEmulationPort="0" IDE0SlaveEmulationPort="1" IDE1MasterEmulationPort="2" IDE1SlaveEmulationPort="3">
+          <AttachedDevice type="HardDisk" hotpluggable="false" port="0" device="0">
+            <Image uuid="{742e6d0f-8896-4aa6-97f4-e05d70e73029}"/>
+          </AttachedDevice>
+          <AttachedDevice passthrough="false" type="DVD" hotpluggable="false" port="1" device="0"/>
+          <AttachedDevice type="HardDisk" hotpluggable="false" port="2" device="0">
+            <Image uuid="{1db0b9fe-36c2-44e8-9b7c-61fa5b6d1462}"/>
+          </AttachedDevice>
+        </StorageController>
+      </StorageControllers>
+      <CPU count="2">
+        <HardwareVirtExLargePages enabled="false"/>
+        <PAE enabled="false"/>
+        <LongMode enabled="true"/>
+      </CPU>
+    </Hardware>
+  </Machine>
+</VirtualBox>

dissect_hypervisor-3.21.dev4/tests/_util.py

@@ -0,0 +1,7 @@
+from __future__ import annotations
+
+from pathlib import Path
+
+
+def absolute_path(filename: str) -> Path:
+    return Path(__file__).parent.joinpath(filename).resolve()

dissect_hypervisor-3.21.dev4/tests/descriptor/test_hyperv.py

@@ -0,0 +1,64 @@
+from __future__ import annotations
+
+from dissect.hypervisor.descriptor.hyperv import HyperVFile
+from tests._util import absolute_path
+
+
+def test_hyperv_vmcx() -> None:
+    with absolute_path("_data/descriptor/hyperv/test.vmcx").open("rb") as fh:
+        hf = HyperVFile(fh)
+
+        assert hf.header is hf.headers[0]
+        assert hf.version == 0x400
+        assert len(hf.replay_logs) == 1
+        assert len(hf.object_tables) == 1
+        assert len(hf.key_tables) == 8
+
+        obj = hf.as_dict()
+        assert set(obj.keys()) == {"configuration"}
+        assert len(obj["configuration"].keys()) == 27
+        assert len(obj["configuration"]["manifest"].keys()) == 39
+        assert len(obj["configuration"]["properties"].keys()) == 11
+        assert len(obj["configuration"]["settings"].keys()) == 6
+
+
+def test_hyperv_vmrs() -> None:
+    with absolute_path("_data/descriptor/hyperv/test.VMRS").open("rb") as fh:
+        hf = HyperVFile(fh)
+
+        assert hf.header is hf.headers[0]
+        assert hf.version == 0x400
+        assert len(hf.replay_logs) == 1
+        assert len(hf.object_tables) == 1
+        assert len(hf.key_tables) == 2
+
+        obj = hf.as_dict()
+        target = {
+            "configuration": {
+                "properties": {"version": 2304},
+                "global_settings": {
+                    "metrics": {
+                        "devicetype": {
+                            "guid": "83F8638B-8DCA-4152-9EDA-2CA8B33039B4",
+                            "deviceinstance": {
+                                "guid": "83F8638B-8DCA-4152-9EDA-2CA8B33039B4",
+                                "metric": {
+                                    "typecode": "4E1D459F-7861-46A4-887C-B64397C97E1B;0\\0\\L",
+                                    "value": 0,
+                                    "enabled": False,
+                                    "starttime": 0,
+                                    "lastcomputedtime": 0,
+                                    "peaktime": 0,
+                                    "poolid": "",
+                                    "resourcetypeid": "70BB60D2-A9D3-46AA-B654-3DE53004B4F8",
+                                },
+                            },
+                        }
+                    }
+                },
+                "_ac6b8dc1-3257-4a70-b1b2-a9c9215659ad_": {"VDEVVersion": 2048},
+                "_e51b7ef6-4a7f-4780-aaae-d4b291aacd2e_": {"VDEVVersion": 512},
+                "_83f8638b-8dca-4152-9eda-2ca8b33039b4_": {"VDEVVersion": 1792},
+            }
+        }
+        assert obj == target