Behavior:Win32/DefenseEvasion.A!ml pops up in microsoft defender when rph start

Some anti-virus software programs mark LSPDFR as a virus. This is known as a false-positive. LSPDFR and RAGEPluginHook make extensive use of memory hooking to achieve a lot of what they do, which can look malicious to anti-virus software. If your anti-virus marks LSPDFR as unsafe or you have odd issues running RPH/LSPDFR, you will either need to exclude LSPDFR and RPH's files (refer to your antivirus documentation for more details) or you will have to disable the anti-virus software.