I haven't been able to find out anything else thus far. I have blacklist the screenshot-cmd.exe until I do. The blacklisting of the file hasn't really affected our ability to manage our endpoints via the MDM.   ... View more

Thanks, will update this page if I find anything out   ... View more

My Meraki updates the file MerakiPCCAgent.msi on the windows clients, then once the file runs it launches m_agent_upgrade.msi which in turn upgraded or installed a different version of  screenshot-cmd.exe which is when it gets flagged as Trojan Bobik.     ... View more

@BrechtSchamp Can you run the m_agent_upgrade.msi and see if the hash changes on the file  screenshot-cmd.exe?   My hash is d013700ee02f7461d2e669d84164f97f6e27b032ae60d4b6b1d03c71d558dc8f and it is also alerting as a virus (Trojan Bobik) by Carbon Black.     ... View more