When applying the latest update TrendMicro detected the files
C:\ManageEngine\dc\DesktopCentral_Server\webapps\DesktopCentral\agent\64bit\OSD-RemoteOffice.zip
as HackTool.Win32.PAExec.aa.
Trend Says it fixed it but I am not sure.
I will be sending the same information to TrendMicro for them to research.