Should I block it?

No, this file is 100% safe to run.

Relationships

PE file structure

Show functions

Import table

advapi32.dll

GetUserNameW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW

awayapi.dll

_awProcDBWritePrivateProfileStringW@16

kernel32.dll

LoadLibraryA, GetProcAddress, HeapReAlloc, VirtualAlloc, GetOEMCP, GetACP, CloseHandle, GetLastError, CreateMutexA, WaitForMultipleObjects, ResetEvent, CreateEventW, lstrcpyW, lstrlenW, GetPrivateProfileStringW, SetEvent, SystemTimeToTzSpecificLocalTime, GetSystemTime, FileTimeToSystemTime, CompareFileTime, SystemTimeToFileTime, LoadLibraryW, GetStringTypeA, lstrcmpW, ReleaseMutex, CreateMutexW, CreateProcessW, TerminateProcess, WaitForSingleObject, CreateEventA, GetSystemDirectoryA, HeapAlloc, GetProcessHeap, HeapFree, GetCPInfo, SetFilePointer, WriteFile, RtlUnwind, VirtualFree, HeapCreate, HeapDestroy, GetVersionExA, GetVersion, GetEnvironmentVariableA, GetFileType, GetStdHandle, SetHandleCount, GetEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsW, GetStringTypeW, SetStdHandle, LCMapStringA, LCMapStringW, ReadFile, ExitProcess, GetCurrentProcess, UnhandledExceptionFilter, GetModuleFileNameA, GetUserDefaultLangID, FlushFileBuffers, WideCharToMultiByte, MultiByteToWideChar, GetModuleHandleA, GetStartupInfoA, GetCommandLineA, FreeEnvironmentStringsA

prochlp.dll

PH_GetOSVersion, PH_GetVersion, PH_CleanupThread, PH_InitializeThread

rpcrt4.dll

NdrServerCall2, RpcEpUnregister, RpcMgmtWaitServerListen, RpcServerListen, RpcServerRegisterAuthInfoA, RpcEpRegisterA, RpcServerInqBindings, RpcServerRegisterIf, RpcServerUseProtseqA, RpcServerUnregisterIf, RpcMgmtStopServerListening, RpcBindingVectorFree

user32.dll

TranslateAcceleratorA, DispatchMessageA, GetMessageA, LoadAcceleratorsA, LoadStringA, RegisterClassExA, LoadCursorA, CreateWindowExA, PostQuitMessage, DefWindowProcA, wsprintfW, MessageBoxW, LoadStringW, TranslateMessage, LoadIconA

AWAYSCH.exe

Away Manager by Lenovo Group Limited

Remove AWAYSCH.exe

Version:	2, 0, 5, 1
MD5:	3160bb9a01e5d430b338fb932a919c50
SHA1:	8cdc18a4f5aaa6e64d59527d2286ed32587f602d
SHA256:	3828056efef84d5e98622288894a059d0f93b4d8cf9e2da8d12374287c712c8f

What is AWAYSCH.exe?

Away Scheduler for Away Manager, a program enables you to run tasks in whisper mode, which automatically limits the resources used to run the selected maintenance tasks based upon the level of resources you designate for the Away Manager and the current level of available resources on the computer. The whisper mode feature maximizes the performance of the selected tasks while working to minimize the impact on the performance of other applications.

Overview

awaysch.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including ThinkVantage Away Manager published by Lenovo, ThinkVantage Away Manager from Lenovo and ThinkVantage Away Manager by Lenovo.

Details

File name:	awaysch.exe
Publisher:	Lenovo Group Limited
Product name:	Away Manager
Description:	Away Scheduler
Typical file path:	C:\Program Files\lenovo\awaytask\awaysch.exe
File version:	2, 0, 5, 1
Size:	68 KB (69,632 bytes)
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

ThinkVantage Away Manager

Lenovo

23% remove

“The Away Manager program enables you to run tasks in whisper mode, which automatically limits the resources used to run the selected maintenance tasks based upon the level of resources you designate for the Away Manager and the current level of available resources on the computer. The whisper mode feature maximizes the performance of the selected tasks while working to minimize the impact on the performance of other applications.”

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'AwaySch' → "C:\Program Files\Lenovo\AwayTask\AwaySch.EXE"

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00003254%	0.028634%
Kernel CPU:	0.00002209%	0.013761%
User CPU:	0.00001044%	0.014873%
Kernel CPU time:	307 ms/min	100,923,805ms/min
Memory
Private memory:	1.27 MB	21.59 MB
Private (maximum):	2.45 MB
Private (minimum):	2.42 MB
Non-paged memory:	1.27 MB	21.59 MB
Virtual memory:	25.29 MB	140.96 MB
Virtual memory (peak):	30.89 MB	169.69 MB
Working set:	2.45 MB	18.61 MB
Working set (peak):	3.4 MB	37.95 MB
Page faults:	1,390/min	2,039/min
I/O
I/O read transfer:	32 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	6 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	36 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	49	600
GUI GDI count:	9	103
GUI USER count:	3	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\lenovo\awaytask\awaysch.exe"
Owner:	User
Parent process:	Explorer.EXE (Windows Explorer by Microsoft)

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	100.00%

Distribution by country

BG installs about 100.00% of Away Manager.

Remove Adware and Spyware Programs, FREE Download!