Mal/Isher

Mal/Isher indicates that Sophos has detected potentially malicious software.

This detection is used for software that is identified as suspicious based on characteristics such as reputation, behavior, or association with known unwanted or harmful applications. The software may be part of a larger ecosystem used to distribute malware, unwanted applications, or deceptive software.

Because this detection is applied using broad classification methods, it may not be possible to attribute the software to a specific malware family or campaign.

Software detected as Mal/Isher‑Gen may:

• Install or deliver other unwanted or malicious programs
• Be distributed via misleading or deceptive download methods
• Exhibit behavior commonly associated with unsafe or untrusted software

If you believe this detection is incorrect, please report the file to Sophos Support. You can also submit samples for further analysis.