LabubaRAT nvidia-sysruntime.exe Enumerating Installed Web Browsers

Duo Tech@duotech

•updated Jul 17, 2026•0•0•2

Detects the LabubaRAT implant (masquerading as nvidia-sysruntime.exe) performing file system checks against Chrome, Firefox, Microsoft Edge, and Brave installation paths as part of its enumerate_browsers() host profiling routine.