LabubaRAT nvidia-sysruntime.exe Archive or Unarchive File Activity

Duo Tech@duotech

•updated Jul 17, 2026•0•0•1

Detects execution or file activity associated with 'nvidia-sysruntime.exe', a known masquerading file name used by LabubaRAT, which often performs unauthorized archiving or staging of data.