Nope, nothing suspicious at all, except you!!!I have investigated amfid, here are my findings:
amfid exists in THREE locations, it seems that if you remove it from one location, it will be automatically re-populated.
Here is a list of strings found inside the application.
idle timer fired, exiting
It seems this application also checks file integrity to see if someone has fiddled with amfid...
unable to get service mach port
It deals with outside communication with ports. Possibly local ports to communicate with the baseband.
lockdown returned UDID but it is not a string unable to connect to lockdown could not get device UDID
amfid closely integrates with lockdown. It seems that certain events happen on certain UDIDs.. this gets more suspicious.