Undocumented folder/file in programdata\intel (AGSRunner.bin)

[Riley_Wilhelm]

This file (AGSRunner.bin) was detected trying to run on a Windows 10 machine on our network, but the attempt was blocked. The file did not appear to be signed in any way and appeared like it tried to run by itself in the background. Scanning it in VirusTotal provided these results to show it may be malware:

VirusTotal

Is there anyone who can vouch for if this is a real Intel file, or driver update package of some kind? It otherwise seems extremely suspicious, and that the file may be a virus that is using the programdata\intel file structure to hide.

[David_G_Intel]

Hello Riley_Wilhelm

Thank you for posting on the Intel️® communities. 

Please share with us the Intel product that you use or the Intel® System Support Utility (Intel® SSU) results 

• Download the Intel SSU https://downloadcenter.intel.com/download/25293/Intel-System-Support-Utility-for-Windows- 
• Open the application and select "Everything" click on "Scan" to see the system and device information. By default, Intel® SSU will take you to the "Summary View".  
• Click on the menu where it says "Summary" to change to "Detailed View".  
• To save your scan, click on "Next", then "Save".  

Intel® software and drivers go through an extensive antivirus scanning process, It is probably not a virus, but the antivirus detecting it this way.

Regards, 

David G 

Intel Customer Support Technician 

[David_G_Intel]

Were you able to check the previous post?  

Let us know if you still need assistance.  

Best regards,  

David G.  

Intel Customer Support Technician  

[David_G_Intel]

We have not heard back from you, so we will close this thread. If you need any additional information, please submit a new question as this thread will no longer be monitored. 

Best regards,  

David G. 

Intel Customer Support Technician  

[tsmith171]

What is this agsrunner.bin file for?  It is being constantly blocked by Bit-9
NT AUTHORITY\SYSTEM on BORDERSTATES\XXX-##### has requested access to agsrunner.bin.
File details: file hash=86f77f8571b8cecb17c8f680edc9730763d143db0f4b79bd8f2c7e1364feb560