Since Suspect Malware reputation takes priority over Local White (Cert Whitelist or Whitelist IT Tools), the Launch32.exe hash will need to be whitelisted
Alternatively, the network share where the Launch32.exe is located can be bypassed when "Performs any API operation"
The location of the network share will vary depending on the version and customization of Sage. Example locations below: