launcher.exe
Opera Internet Browser file version info
Program on Windows 4 known copies with hashes 1 Sigma rule names it
Is it the real launcher.exe?
C:\Program Files\Opera\4 known copies
81.0.4196.31 · C:\Program Files\Opera\launcher.exe · signed by Opera Software AS
d860be76a3e88abfb48a9b5618e90ecac15f6d6be73c46a20ee91026bca0699b71.0.3770.171 · C:\Program Files\Opera\launcher.exe · signed by Opera Software AS
abe39fe53362785419cde37bb5cfb209edc00e0772fedfab520f21cb231ed46e70.0.3728.133 · C:\program files\Opera\launcher.exe · signed by Opera Software AS
e7043bfdefffb0ebc799c7087ce435506775470cb4c46f341c77eb9ecaecd35570.0.3728.106 · C:\Program Files\Opera\launcher.exe · signed by Opera Software AS
73550b0620bcc5f7088bdda70e86a08499ad1375ceb1fb975731521964734de2From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.
What detects it
Sigma names launcher.exe in 1 rule, for every kind of event; none is a process creation rule CmdID evaluates, so none is listed.