Just wondered if anyone else has had Sophos suddenly start catching and deleting the 19.1 WebOrder.exe and WebOrderMobile.exe

I am using

Last Update:         20/02/2020 09:31
Core Agent:          2.5.5
Endpoint Advanced:
Sophos Intercept X:  2.0.16
Device Encryption:   Not Installed
I'm guessing all any virus scanner does is look for specific patterns of bytes and you just get lucky or unlucky ?