Potential RjvPlatform.DLL Sideloading From Non-Default Location

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•13

Detects potential DLL sideloading of "RjvPlatform.dll" by "SystemResetPlatform.exe" when "SystemResetPlatform.exe" is executed from a non-default, suspicious location. This technique can be used for persistence, defense evasion, and privilege escalation.