LegionLoader 7z.exe Unpacking data.dat in Traiolx Custom Utils Directory

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects the use of 7-Zip (7z.exe) to archive files named 'data.dat' or files within the 'Traiolx Custom Utils' directory, when initiated by command-line interpreters like cmd.exe or the Windows Installer (msiexec.exe). This pattern is often indicative of data staging or collection activities prior to exfiltration.