Sophos Endpoint detect cache2 folder of Thunderbird as malware

Hi,

I have some clients with the same issue as below:

Sophos Endpoint detect files under the folder named cache2/entries of Thunderbird (mail client) as malware, here is one of them:

c:\users\ken.nguyen\appdata\local\thunderbird\profiles\4e6914bn.default-release\cache2\entries\807431c7383bcad28c9a958ee68092b64294cdcc

Almost every day Sophos reports that the files in the cache2/entries folder are malware even though they have been deleted.

Is this incorrect detection? How do get it fixed? Thanks