LegionLoader: 7z.exe Unpacking data.dat from Traiolx Custom Utils Staging Dir

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•4

Detects the execution of 7z.exe with specific command line arguments that include references to 'data.dat' and 'Traiolx Custom Utils', which may indicate the use of 7-Zip for staging or archiving collected data for exfiltration.