Packages List

Package	HMC Ready	Test
Hooks
CryptExportKey	✔️	❌
CryptGenKey	✔️	❌
CryptImportKey	✔️	❌
LdrLoadDll	✔️	❌
LdrUnloadDll	✔️	❌
NtAllocateVirtualMemory	✔️	❌
NtClose	✔️	❌
NtCreateFile	✔️	❌
NtCreateThread	✔️	❌
NtCreateThreadEx	✔️	❌
NtCreateUserProcess	✔️	❌
NtDeviceIoControlFile	✔️	❌
NtOpenFile	✔️	❌
NtQueryDirectoryFile	✔️	❌
NtQueryDirectoryFileEx	✔️	❌
NtQueryInformationProcess	❌	❌
NtQuerySystemInformation	✔️	❌
NtReadFile	✔️	❌
NtSetInformationFile	✔️	❌
NtWriteFile	✔️	❌
NtWriteVirtualMemory	✔️	❌
RtlInitUnicodeString	✔️	❌
Probes
Crypto Key Exported	✔️	✔️
Crypto Key Generated	✔️	✔️
Crypto Key Imported	✔️	✔️
File Closed	✔️	❌
File Copied	✔️	✔️
File Created By Browser	✔️	❌
File Modified By Gancrab	✔️	❌
File Moved	✔️	✔️
File Opened For Write	✔️	✔️
File Write	✔️	✔️
Hide File	✔️	✔️
Hide Process	✔️	✔️
Interprocess Memory Allocation	✔️	✔️
Interprocess Memory Write	✔️	✔️
Interprocess Thread Creation	✔️	✔️
IOCTL Sent	✔️	✔️
Module Loading	✔️	✔️
Process Created	✔️	✔️
Raw Disk Write Access	✔️	✔️
Scheduled Probes
Services List	✔️	✔️
ESMs
Ransomware Detected	✔️	❌
Suspicious Process Created 1	✔️	❌