这是我用PT导出的内核线程列表，最后两个应该就是木马了吧？

线程对象,入口地址,线程状态,线程模块路径,文件厂商

0xfffffa8006d9c040,0xfffff80002fe3850,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d95850,0xfffff80002fe31d0,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006daa040,0xfffff80002fe31d0,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d59b50,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d59660,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d59170,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d46040,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d46b50,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d46660,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d45040,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d45b50,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d45660,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d44040,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d44b50,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d44660,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d43040,0xfffff80002ed9740,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d43b50,0xfffff800031b4528,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d5db50,0xfffff80002e89e88,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d5d660,0xfffff80002e89e88,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d47040,0xfffff80002e89e88,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d47b50,0xfffff80002e89e88,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d4db50,0xfffff80002f1c748,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d4d660,0xfffff80002e5d990,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d4e040,0xfffff80002f08f10,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d4e8d0,0xfffff80002eba408,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d54040,0xfffff80002f03c20,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d204c0,0xfffff80002f16060,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d24b50,0xfffff80002fdf0a0,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d25040,0xfffff80002fdf0a0,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d2cb50,0xfffff80002e8dcd4,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d8d040,0xfffff800031e77e4,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006d8d790,0xfffff800031e77e4,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006da4410,0xfffff800031e77e4,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006da5b50,0xfffff800031e77e4,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006de0b50,0xfffff800031e77e4,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006de3040,0xfffff800031e77e4,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa80076567d0,0xfffff8000315bb60,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8006cac7c0,0xfffff880011260e0,Waiting,C:\Windows\system32\drivers\sptd.sys,Duplex Secure Ltd.,
0xfffffa8006cac2d0,0xfffff880011260e0,Waiting,C:\Windows\system32\drivers\sptd.sys,Duplex Secure Ltd.,
0xfffffa8006cad040,0xfffff880011260e0,Waiting,C:\Windows\system32\drivers\sptd.sys,Duplex Secure Ltd.,
0xfffffa8006cb6b50,0xfffff8800101af7c,Waiting,C:\Windows\system32\drivers\ACPI.sys,Microsoft Corporation,
0xfffffa800769e650,0xfffff88001014744,Waiting,C:\Windows\system32\drivers\ACPI.sys,Microsoft Corporation,
0xfffffa8007c03040,0xfffff8800173d0d0,Waiting,C:\Windows\system32\drivers\ndis.sys,Microsoft Corporation,
0xfffffa8007c03b50,0xfffff8800171a970,Waiting,C:\Windows\system32\drivers\ndis.sys,Microsoft Corporation,
0xfffffa8007c1a880,0xfffff8800170bc50,Waiting,C:\Windows\system32\drivers\ndis.sys,Microsoft Corporation,
0xfffffa8007139060,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa8007cbfb50,0xfffff88001dc6c8c,Waiting,C:\Windows\system32\SYMEFASI64.SYS,文件不存在,
0xfffffa8007cd7b50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8007cdab50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8007cdbb50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8007cdcb50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8007cddb50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8007cdeb50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8007cdfb50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8007ce0b50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8007ce1b50,0xfffff88001ad6900,Waiting,C:\Windows\system32\drivers\volsnap.sys,Microsoft Corporation,
0xfffffa8006d4d040,0xfffff88001d3c418,Waiting,C:\Windows\system32\SYMEFASI64.SYS,文件不存在,
0xfffffa80081217f0,0xfffff880016615c4,Waiting,C:\Windows\system32\drivers\watchdog.sys,Microsoft Corporation,
0xfffffa80081606a0,0xfffff8800443cd00,Terminated,C:\Windows\system32\drivers\VBoxNetLwf.sys,Oracle Corporation,
0xfffffa80081bf750,0xfffff8800470cd10,Waiting,C:\Windows\system32\drivers\VBoxDrv.sys,Oracle Corporation,
0xfffffa8008235b50,0xfffff880048b631c,Waiting,C:\Windows\system32\drivers\rdbss.sys,Microsoft Corporation,
0xfffffa8008261750,0xfffff8800482015c,Waiting,C:\Windows\system32\eeCtrl64.sys,文件不存在,
0xfffffa80082d91f0,0xfffff8800435062c,Waiting,C:\Windows\system32\drivers\blbdrive.sys,Microsoft Corporation,
0xfffffa80082dd920,0xfffff88004d9a550,Waiting,C:\Windows\system32\BHDrvx64.sys,文件不存在,
0xfffffa8008a6e040,0xfffff88004c1ed20,Terminated,C:\Windows\system32\BHDrvx64.sys,文件不存在,
0xfffffa8008ab6b50,0xfffff88010334a68,Waiting,C:\Windows\system32\drivers\dxgkrnl.sys,Microsoft Corporation,
0xfffffa8008ab9b50,0xfffff80003160a40,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa8008ac0630,0xfffff8800f54d850,Waiting,C:\Windows\system32\drivers\igdkmd64.sys,Intel Corporation,
0xfffffa8008ab5040,0xfffff88010337628,Waiting,C:\Windows\system32\drivers\dxgkrnl.sys,Microsoft Corporation,
0xfffffa8008e7f040,0xfffff88004ef1c4c,Waiting,C:\Windows\system32\drivers\rtl8192Ce.sys,Realtek Semiconductor Corporation                           ,
0xfffffa8007b77570,0xfffff880050f0170,Waiting,C:\Windows\system32\drivers\raspptp.sys,Microsoft Corporation,
0xfffffa8007ba4b50,0xfffff88004ef1d88,Terminated,C:\Windows\system32\drivers\rtl8192Ce.sys,Realtek Semiconductor Corporation                           ,
0xfffffa8007bac520,0xfffff8800171a970,Waiting,C:\Windows\system32\drivers\ndis.sys,Microsoft Corporation,
0xfffffa80099bcb50,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099bf740,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c1b50,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c1660,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099cbb50,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c3040,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c3b50,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099cc040,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099cc7a0,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099cdb50,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099ce040,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099ceb50,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099cf040,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099cf7a0,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c4b50,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c5040,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c5740,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c6b50,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c7040,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c7660,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099c8040,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099d9570,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa80099d8040,0xfffff88005fe8590,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa8009a28b50,0xfffff88005ff8ee8,Waiting,C:\Windows\system32\drivers\RTKVHD64.sys,Realtek Semiconductor Corp.,
0xfffffa800e1c1940,0xfffff880048cfa14,Waiting,C:\Windows\system32\drivers\rdbss.sys,Microsoft Corporation,
0xfffffa800a6e58b0,0xfffff880103d3dc0,Waiting,C:\Windows\system32\drivers\dxgmms1.sys,Microsoft Corporation,
0xfffffa800a73eb50,0xfffff8800141e670,Waiting,C:\Windows\system32\drivers\msrpc.sys,Microsoft Corporation,
0xfffffa8006eccb50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800b70f570,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800a999b50,0xfffff8800627e590,Waiting,C:\Windows\system32\drivers\luafv.sys,Microsoft Corporation,
0xfffffa800ab65060,0xfffff8800430f51c,Waiting,C:\Windows\system32\drivers\csc.sys,Microsoft Corporation,
0xfffffa800ab65670,0xfffff8800430f51c,Waiting,C:\Windows\system32\drivers\csc.sys,Microsoft Corporation,
0xfffffa800736c060,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800abcdb50,0xfffff800031e77e4,Waiting,C:\Windows\system32\ntoskrnl.exe,Microsoft Corporation,
0xfffffa800bee6060,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800b2c0b50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800a6f8360,0xfffff88003d56010,Waiting,C:\Windows\system32\drivers\HTTP.sys,Microsoft Corporation,
0xfffffa800a6f6040,0xfffff88003d56010,Waiting,C:\Windows\system32\drivers\HTTP.sys,Microsoft Corporation,
0xfffffa800a6cf040,0xfffff88003d6b950,Waiting,C:\Windows\system32\drivers\HTTP.sys,Microsoft Corporation,
0xfffffa800a7f8360,0xfffff88003c0e230,Waiting,C:\Windows\system32\drivers\mpsdrv.sys,Microsoft Corporation,
0xfffffa800ad91040,0xfffff88003d56010,Waiting,C:\Windows\system32\drivers\HTTP.sys,Microsoft Corporation,
0xfffffa800ab7a060,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800addf500,0xfffff880048cfa14,Waiting,C:\Windows\system32\drivers\rdbss.sys,Microsoft Corporation,
0xfffffa8007164b50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800b1039f0,0xfffff880058ac2d0,Terminated,C:\Windows\system32\drivers\PECKP_x64.SYS,SA,
0xfffffa800b105040,0xfffff880058acbb0,Waiting,C:\Windows\system32\drivers\PECKP_x64.SYS,SA,
0xfffffa800b104920,0xfffff880058a9950,Waiting,C:\Windows\system32\drivers\PECKP_x64.SYS,SA,
0xfffffa800b0f2040,0xfffff880058a9f30,Terminated,C:\Windows\system32\drivers\PECKP_x64.SYS,SA,
0xfffffa800b104430,0xfffff880058a9f30,Terminated,C:\Windows\system32\drivers\PECKP_x64.SYS,SA,
0xfffffa800b106b50,0xfffff880058a9f30,Terminated,C:\Windows\system32\drivers\PECKP_x64.SYS,SA,
0xfffffa800b105b50,0xfffff880058a9f30,Terminated,C:\Windows\system32\drivers\PECKP_x64.SYS,SA,
0xfffffa800735db50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800b517b50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa8007e55b50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa8006fc0b50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800b8b1b50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800ac0cb50,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800e06da50,0xfffff88001d99120,Terminated,C:\Windows\system32\SYMEFASI64.SYS,文件不存在,
0xfffffa80070e6b50,0xfffff8800a75b050,Waiting,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa8007284a90,0xfffff8800a7324e0,Terminated,C:\Windows\system32\SRTSP64.SYS,文件不存在,
0xfffffa800b287680,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2b0b50,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2b0660,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2c49e0,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2b6040,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2c4040,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2b69f0,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2b5040,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2b5b50,0xfffff8800850f240,Waiting,C:\Windows\system32\drivers\srv2.sys,Microsoft Corporation,
0xfffffa800b2ceb50,0xfffff88008597940,Waiting,C:\Windows\system32\drivers\srv.sys,Microsoft Corporation,
0xfffffa800b2ce660,0xfffff88008597940,Waiting,C:\Windows\system32\drivers\srv.sys,Microsoft Corporation,
0xfffffa800b2b5660,0xfffff88008597940,Waiting,C:\Windows\system32\drivers\srv.sys,Microsoft Corporation,
0xfffffa800b2665a0,0xfffff88008597940,Waiting,C:\Windows\system32\drivers\srv.sys,Microsoft Corporation,
0xfffffa800b267640,0xfffff88008597940,Waiting,C:\Windows\system32\drivers\srv.sys,Microsoft Corporation,
0xfffffa800b270040,0xfffff88008597940,Waiting,C:\Windows\system32\drivers\srv.sys,Microsoft Corporation,
0x33561000,0x33563000,Initialized,C:\Windows\system32\　,文件不存在,
0x254bd1b1e3453,0x00000000,Unknown,UnKnow,,

[培训]科锐逆向工程师培训第53期2025年7月8日开班！