I just got a hit from my security tools on a possible hit on a file downloaded today via Desktop Central scheduled updates. The file name is called \ManageEngine\DesktopCentral_Server\webapps\DesktopCentral\store\dcreplication.zip I am not sure if all of you are getting similar results. It might be a false positive. The file detected was dcreplication.zip (MD5: ccf8ffb8fd51b5baa680261c12fdcfb4).