Parent process

Child process

Related files

af_proxy_cmd.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent cmw_srv.exe (Hotspot Shield 3.23 by AnchorFree Inc). The file is digitally signed by AnchorFree Inc which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 8 Enterprise N (6.2.9200.0).

CPU
Total CPU:	0.02198112%	0.028634%
Kernel CPU:	0.00803261%	0.013761%
User CPU:	0.01394851%	0.014873%
Kernel CPU time:	296 ms/min	100,923,805ms/min
CPU cycles:	134,977/sec	17,470,203/sec
Context switches:	42/sec	284/sec
Memory
Private memory:	12.35 MB	21.59 MB
Private (maximum):	26.3 MB
Private (minimum):	14.38 MB
Non-paged memory:	12.35 MB	21.59 MB
Virtual memory:	100.55 MB	140.96 MB
Virtual memory (peak):	101.81 MB	169.69 MB
Working set:	14.45 MB	18.61 MB
Working set (peak):	26.36 MB	37.95 MB
Page faults:	14,377/min	2,039/min
I/O
I/O read transfer:	3.36 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	28.65 KB/sec	448.09 KB/min
I/O other operations:	10/sec	1,671/min
Resource allocations
Threads:	28	12
Handles:	218	600