LegionLoader msiexec.exe spawning cmd.exe to execute xupdate.bat

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•3

Detects msiexec.exe spawning cmd.exe with a command line containing specific indicators related to 'Traiolx Custom Utils' and 'xupdate.bat'. This behavior is indicative of potential malicious installation scripts or installer abuse.