Pretty sure I have malware, probably cryptocurrency mining

Question

Level 1

18 points

Pretty sure I have malware, probably cryptocurrency mining

OK so I frequently find my mid 2014 MBP with it's fan spinning away madly, especially when unattended with the internet connection left on. I look at the Activity Monitor and see a process titled "firefox" is eating 65% of my CPU (and every time this happens, it is always exactly 65%) so I close firefox. But that doesn't kill the process. And there is this other thing called Firefox Web Content (Not Responding) which is always eating gigabytes of my memory. I suppose it could just be a buggy firefox, but methinks it is some cryptocurrency mining malware, especially since I visit various crypto sites because I do legit mining myself.

I’ve scanned with Malwarebytes and Comodo and Sophos, and they don’t catch anything. I could just kill the processes and wipe my cache and firefox web history and maybe that would fix it, but I want to submit this to virus/malware scanners. But I don't know what to submit, there are too many files.

So inspecting these two offending processes, there is a long list of files they have open. Maybe someone here can look at this and tell me what is going on. First I'll paste the "firefox" process, and then after that the "Firefox Web Content"

cwd

/

txt

/Applications/Firefox.app/Contents/MacOS/firefox

txt

/Applications/Firefox.app/Contents/MacOS/libmozglue.dylib

txt

/Applications/Firefox.app/Contents/MacOS/libnss3.dylib

txt

/Applications/Firefox.app/Contents/MacOS/liblgpllibs.dylib

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/features/{381aa27a-785b-fc44-b2cb-de6b7704b45e}/shield-recipe-client@mozilla.org.xpi

txt

/System/Library/Caches/com.apple.IntlDataCache.le.kbdx

txt

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/SystemAp pearance.car

txt

/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLRendererFloat .bundle/GLRendererFloat

txt

/usr/lib/dyld

txt

/Applications/Firefox.app/Contents/MacOS/XUL

txt

/usr/share/icu/icudt57l.dat

txt

/Applications/Firefox.app/Contents/Resources/omni.ja

txt

/Applications/Firefox.app/Contents/Resources/browser/omni.ja

txt

/Applications/Firefox.app/Contents/Resources/icudt59l.dat

txt

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/startupCache/scr iptCache-child-current.bin

txt

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/startupCache/scr iptCache-current.bin

txt

/Applications/Firefox.app/Contents/Resources/browser/features/firefox@getpocket.com.xpi

txt

/Applications/Firefox.app/Contents/Resources/res/cursors/rowResize.png

txt

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/C/com.apple.scriptmanager 2.le.cache

txt

/Applications/Firefox.app/Contents/Resources/res/cursors/rowResize@2x.png

txt

/Library/Caches/com.apple.iconservices.store/F206CDC4-BA3A-B47F-D460-E973FE81C5E 9.isdata

txt

/Applications/Firefox.app/Contents/Resources/res/cursors/zoomIn.png

txt

/Applications/Firefox.app/Contents/Resources/res/cursors/zoomIn@2x.png

txt

/Library/Caches/com.apple.iconservices.store/E2C573DD-CD2D-4344-1D8A-09C65AD124C C.isdata

txt

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/Assets.c ar

txt

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/VibrantL ightAppearance.car

txt

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/C/org.mozilla.firefox/com .apple.metal/libraries.data

txt

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/C/org.mozilla.firefox/com .apple.metal/Intel Iris Pro Graphics/functions.data

txt

/Library/Caches/com.apple.iconservices.store/3311DBF0-15B0-0DCF-BF3B-7EC570F0295 B.isdata

txt

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/Function RowAppearance.car

txt

/System/Library/Fonts/Keyboard.ttf

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/{73a6fe31-595d-460b- a920-fcc0f8843232}.xpi

txt

/System/Library/Fonts/SFNSText.ttf

txt

/System/Library/Fonts/SFNSDisplay.ttf

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W3.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W6.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe6\x98\x8e\xe6\x9c\x9d ProN W3.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe6\x98\x8e\xe6\x9c\x9d ProN W6.ttc

txt

/Library/Fonts/Songti.ttc

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/webappsstore.sqlite-shm

txt

/System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources/AppleKeyboardLayouts-L.d at

txt

/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fram ework/Versions/A/Resources/Extras2.rsrc

txt

/System/Library/Extensions/AppleIntelHD5000GraphicsMTLDriver.bundle/Contents/Mac OS/AppleIntelHD5000GraphicsMTLDriver

txt

/Applications/Firefox.app/Contents/Resources/browser/features/followonsearch@mozilla.com.xpi

txt

/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLEngine.bundle /GLEngine

txt

/System/Library/Extensions/AppleIntelHD5000GraphicsGLDriver.bundle/Contents/MacO S/AppleIntelHD5000GraphicsGLDriver

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite-shm

txt

/System/Library/Fonts/Helvetica.dfont

txt

/Applications/Firefox.app/Contents/Resources/res/cursors/sizeSE.png

txt

/Applications/Firefox.app/Contents/Resources/res/cursors/sizeSE@2x.png

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite-shm

txt

/System/Library/Fonts/Times.dfont

txt

/Applications/Firefox.app/Contents/MacOS/libsoftokn3.dylib

txt

/Applications/Firefox.app/Contents/MacOS/libnssdbm3.dylib

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/cookies.sqlite-shm

txt

/Library/Fonts/STIXIntUpReg.otf

txt

/Library/Fonts/Bodoni Ornaments.ttf

txt

/Library/Fonts/STIXSizTwoSymReg.otf

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/uBlock0@raymondhill.ne t.xpi

txt

/Library/Fonts/Webdings.ttf

txt

/Library/Fonts/STIXSizOneSymReg.otf

txt

/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fram ework/Versions/A/Resources/HIToolbox.rsrc

txt

/Applications/Firefox.app/Contents/Resources/res/cursors/colResize.png

txt

/Applications/Firefox.app/Contents/Resources/res/cursors/colResize@2x.png

txt

/System/Library/PrivateFrameworks/FinderKit.framework/Versions/A/Resources/Base. lproj/IconCollectionGroupHeaderView.nib

txt

/System/Library/Fonts/Symbol.ttf

txt

/Library/Caches/com.apple.iconservices.store/6147281C-5093-C6F3-3E4B-8E3CFDBB068 2.isdata

txt

/Library/Caches/com.apple.iconservices.store/55C3EF8E-5284-DE72-168F-B902B608E65 D.isdata

txt

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/C/com.apple.iconservices/ store.index

txt

/Library/Caches/com.apple.iconservices.store/D751557B-9EB2-9FF0-5760-1E62D66CE58 9.isdata

txt

/Library/Caches/com.apple.iconservices.store/2109849C-DBC0-A3D4-7814-C1C1565A6EE 7.isdata

txt

/Library/Caches/com.apple.iconservices.store/66211636-7F2A-9904-4192-11D8B5344D1 2.isdata

txt

/Library/Caches/com.apple.iconservices.store/79F74731-5091-2E5B-7E28-E5D9A7341FA B.isdata

txt

/Library/Caches/com.apple.iconservices.store/948D9041-DB54-8D00-AD9C-FC6C749E4E4 4.isdata

txt

/Library/Caches/com.apple.iconservices.store/C40C7478-9905-E1EA-B6F4-AFCC4706A3B 1.isdata

txt

/Library/Caches/com.apple.iconservices.store/E04B7389-7264-2A8F-EF0C-77DBB887002 4.isdata

txt

/Library/Caches/com.apple.iconservices.store/FA08745F-3EEC-8313-0971-33AD52918EB 5.isdata

txt

/Library/Caches/com.apple.iconservices.store/C510D7A3-F1DB-5C29-9E41-CF2A30E4D5A 6.isdata

txt

/Library/Caches/com.apple.iconservices.store/C7E71A85-CEC5-5B57-1675-81CDD6F48E3 3.isdata

txt

/System/Library/Fonts/ArialHB.ttc

txt

/Library/Fonts/PlantagenetCherokee.ttf

txt

/Library/Fonts/STIXIntSmReg.otf

txt

/Library/Fonts/STIXSizFourSymReg.otf

txt

/Applications/Firefox.app/Contents/MacOS/libfreebl3.dylib

txt

/Library/Fonts/Gurmukhi MN.ttc

txt

/Library/Fonts/STIXNonUni.otf

txt

/Applications/Firefox.app/Contents/MacOS/libnssckbi.dylib

txt

/Library/Fonts/Verdana.ttf

txt

/System/Library/Fonts/Apple Braille Outline 6 Dot.ttf

txt

/Library/Fonts/Beirut.ttc

txt

/Library/Fonts/Bodoni 72 OS.ttc

txt

/Library/Fonts/ITFDevanagari.ttc

txt

/System/Library/Fonts/Optima.ttc

txt

/Library/Fonts/Tamil MN.ttc

txt

/Library/Fonts/Waseem.ttc

txt

/Library/Fonts/Arial Black.ttf

txt

/Library/Fonts/DIN Condensed Bold.ttf

txt

/Applications/Firefox.app/Contents/Resources/browser/features/screenshots@mozilla.org.xpi

txt

/Library/Fonts/Malayalam Sangam MN.ttc

txt

/Library/Fonts/Nadeem.ttc

txt

/Applications/Firefox.app/Contents/MacOS/libmozavutil.dylib

txt

/Applications/Firefox.app/Contents/MacOS/libmozavcodec.dylib

txt

/Library/Fonts/SuperClarendon.ttc

txt

/Library/Fonts/Hoefler Text.ttc

txt

/System/Library/Fonts/MarkerFelt.ttc

txt

/Library/Fonts/Malayalam MN.ttc

txt

/Library/Fonts/Herculanum.ttf

txt

/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fram ework/Versions/A/Resources/English.lproj/Localized.rsrc

txt

/Library/Fonts/Trebuchet MS Bold.ttf

txt

/System/Library/PrivateFrameworks/FinderKit.framework/Versions/A/Resources/Asset s.car

txt

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/0/com.apple.LaunchService s-175-v2.csstore

txt

/Applications/Firefox.app/Contents/Resources/firefox.icns

txt

/Library/Fonts/Telugu MN.ttc

txt

/Library/Fonts/NewPeninimMT.ttc

txt

/Library/Fonts/Lao Sangam MN.ttf

txt

/Library/Fonts/STIXSizThreeSymReg.otf

txt

/Library/Caches/com.apple.iconservices.store/9872BAF8-47F5-2E12-9B6F-0D5A83EBF66 D.isdata

txt

/System/Library/Frameworks/OpenCL.framework/Versions/A/Libraries/ImageFormats/un orm8_rgx.dylib

txt

/Library/Fonts/Chalkduster.ttf

txt

/Library/Fonts/Bangla Sangam MN.ttc

txt

/System/Library/Fonts/ZapfDingbats.ttf

txt

/Library/Fonts/Mshtakan.ttc

txt

/Library/Fonts/Brush Script.ttf

txt

/System/Library/Fonts/GeezaPro.ttc

txt

/System/Library/Fonts/Avenir.ttc

txt

/System/Library/Fonts/LucidaGrande.ttc

txt

/Library/Fonts/Mishafi Gold.ttf

txt

/Library/Fonts/Telugu Sangam MN.ttc

txt

/Library/Fonts/Al Tarikh.ttc

txt

/Library/Fonts/STIXSizFiveSymReg.otf

txt

/Library/Fonts/SignPainter.ttc

txt

/Library/Fonts/Sinhala Sangam MN.ttc

txt

/Library/Fonts/NISC18030.ttf

txt

/System/Library/Fonts/Apple Color Emoji.ttc

txt

/Library/Fonts/Arial Unicode.ttf

txt

/Library/Fonts/Baskerville.ttc

txt

/System/Library/Fonts/AppleSDGothicNeo.ttc

txt

/Library/Fonts/Iowan Old Style.ttc

txt

/Library/Fonts/Apple Chancery.ttf

txt

/Library/Fonts/Didot.ttc

txt

/Library/Fonts/Oriya Sangam MN.ttc

txt

/Library/Fonts/EuphemiaCAS.ttc

txt

/Library/Fonts/Copperplate.ttc

txt

/System/Library/Fonts/Avenir Next.ttc

txt

/Library/Fonts/Sathu.ttf

txt

/Library/Fonts/Gurmukhi.ttf

txt

/Library/Fonts/Tahoma.ttf

txt

/Library/Fonts/Baghdad.ttc

txt

/Library/Fonts/Wingdings.ttf

txt

/Library/Fonts/Farah.ttc

txt

/Library/Fonts/Arial Rounded Bold.ttf

txt

/Library/Fonts/GillSans.ttc

txt

/Library/Fonts/Bangla MN.ttc

txt

/Library/Fonts/KufiStandardGK.ttc

txt

/Library/Fonts/Myanmar Sangam MN.ttc

txt

/Library/Fonts/Gurmukhi Sangam MN.ttc

txt

/Library/Fonts/Kokonor.ttf

txt

/Library/Fonts/Futura.ttc

txt

/Library/Fonts/DIN Alternate Bold.ttf

txt

/Library/Fonts/Marion.ttc

txt

/Library/Fonts/Wingdings 3.ttf

txt

/Library/Fonts/STIXVar.otf

txt

/Library/Fonts/STIXIntUpDReg.otf

txt

/Library/Fonts/STIXIntDReg.otf

txt

/Library/Fonts/STIXIntUpSmReg.otf

txt

/Library/Fonts/Georgia.ttf

txt

/Library/Fonts/Kannada Sangam MN.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W0.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W1.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W2.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W4.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W5.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W7.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W8.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W9.ttc

txt

/System/Library/Fonts/STHeiti Light.ttc

txt

/System/Library/Fonts/STHeiti Medium.ttc

txt

/Library/Fonts/Mishafi.ttf

txt

/System/Library/Fonts/Kohinoor.ttc

txt

/System/Library/Fonts/Palatino.ttc

txt

/Library/Fonts/SukhumvitSet.ttc

txt

/Library/Fonts/Arial.ttf

txt

/Library/Fonts/Diwan Kufi.ttc

txt

/Library/Fonts/Corsiva.ttc

txt

/System/Library/Fonts/PingFang.ttc

txt

/Library/Fonts/Farisi.ttf

txt

/Library/Fonts/Sana.ttc

txt

/System/Library/Fonts/Monaco.dfont

txt

/Library/Fonts/Kefa.ttc

txt

/Library/Fonts/PTSerifCaption.ttc

txt

/Library/Fonts/Shree714.ttc

txt

/Library/Fonts/InaiMathi.ttf

txt

/Library/Fonts/Andale Mono.ttf

txt

/Library/Fonts/Khmer MN.ttc

txt

/Library/Fonts/Khmer Sangam MN.ttf

txt

/Library/Fonts/PTSans.ttc

txt

/Library/Fonts/Myanmar MN.ttc

txt

/Library/Fonts/Impact.ttf

txt

/System/Library/Fonts/KohinoorBangla.ttc

txt

/Library/Fonts/DevanagariMT.ttc

txt

/System/Library/Fonts/Apple Symbols.ttf

txt

/Library/Fonts/AmericanTypewriter.ttc

txt

/Library/Fonts/Bradley Hand Bold.ttf

txt

/Library/Fonts/Krungthep.ttf

txt

/System/Library/Fonts/Menlo.ttc

txt

/Library/Fonts/Luminari.ttf

txt

/Library/Fonts/Arial Narrow.ttf

txt

/Library/Fonts/Chalkboard.ttc

txt

/Library/Fonts/Savoye LET.ttc

txt

/Library/Fonts/Cochin.ttc

txt

/Library/Fonts/Diwan Thuluth.ttf

txt

/System/Library/Fonts/Courier.dfont

txt

/Library/Fonts/Sinhala MN.ttc

txt

/Library/Fonts/Zapfino.ttf

txt

/System/Library/Fonts/Avenir Next Condensed.ttc

txt

/Library/Fonts/Charter.ttc

txt

/Library/Fonts/Tamil Sangam MN.ttc

txt

/Library/Fonts/Trebuchet MS.ttf

txt

/System/Library/Fonts/HelveticaNeue.dfont

txt

/Library/Fonts/SnellRoundhand.ttc

txt

/Library/Fonts/Kannada MN.ttc

txt

/Library/Fonts/Kailasa.ttc

txt

/Library/Fonts/AlBayan.ttc

txt

/Library/Fonts/Oriya MN.ttc

txt

/Library/Fonts/Wingdings 2.ttf

txt

/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x8e\xe4\ xb8\xb8\xe3\x82\xb3\xe3\x82\x99 ProN W4.ttc

txt

/System/Library/Fonts/Hiragino Sans GB W3.ttc

txt

/System/Library/Fonts/Hiragino Sans GB W6.ttc

txt

/Library/Fonts/Seravek.ttc

txt

/System/Library/Fonts/Thonburi.ttc

txt

/System/Library/Fonts/KohinoorTelugu.ttc

txt

/Library/Fonts/Microsoft Sans Serif.ttf

txt

/Library/Fonts/DecoTypeNaskh.ttc

txt

/Library/Fonts/Trattatello.ttf

txt

/Library/Fonts/Times New Roman.ttf

txt

/Library/Fonts/Comic Sans MS.ttf

txt

/Library/Fonts/Skia.ttf

txt

/Library/Fonts/Bodoni 72.ttc

txt

/Library/Fonts/PTMono.ttc

txt

/Library/Fonts/Lao MN.ttc

txt

/Library/Fonts/Athelas.ttc

txt

/Library/Fonts/Devanagari Sangam MN.ttc

txt

/Library/Fonts/STIXGeneral.otf

txt

/Library/Fonts/BigCaslon.ttf

txt

/Library/Fonts/Al Nile.ttc

txt

/Library/Fonts/Phosphate.ttc

txt

/Library/Fonts/Courier New.ttf

txt

/Library/Fonts/Muna.ttc

txt

/Library/Fonts/GujaratiMT.ttc

txt

/System/Library/Fonts/Noteworthy.ttc

txt

/Library/Fonts/ChalkboardSE.ttc

txt

/Library/Fonts/Raanana.ttc

txt

/System/Library/Fonts/Geneva.dfont

txt

/Library/Fonts/AppleMyungjo.ttf

txt

/Library/Fonts/Silom.ttf

txt

/Library/Fonts/AppleGothic.ttf

txt

/Library/Fonts/Gujarati Sangam MN.ttc

txt

/Library/Fonts/Ayuthaya.ttf

txt

/Library/Fonts/Bodoni 72 Smallcaps Book.ttf

txt

/Library/Fonts/Papyrus.ttc

txt

/Library/Fonts/PTSerif.ttc

txt

/Library/Fonts/Damascus.ttc

txt

/System/Library/Fonts/SFNSTextItalic.ttf

txt

/System/Library/Frameworks/OpenCL.framework/Versions/A/Libraries/ImageFormats/un orm8_bgra.dylib

txt

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/startupCache/sta rtupCache.8.little

0

/dev/null

1

/dev/null

2

/dev/null

3

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/.parentlock

5

->0x71deca41866028ff

6

->0x71deca418660037f

7

/Applications/Firefox.app/Contents/Resources/omni.ja

8

/Applications/Firefox.app/Contents/Resources/browser/omni.ja

10

->0x71deca4186602b3f

11

->0x71deca41866029bf

12

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/startupCache/scr iptCache-child-current.bin

13

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/startupCache/scr iptCache-current.bin

14

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/startupCache/sta rtupCache.8.little

15

/Applications/Firefox.app/Contents/Resources/browser/features/firefox@getpocket.com.xpi

16

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/features/{381aa27a-785b-fc44-b2cb-de6b7704b45e}/shield-recipe-client@mozilla.org.xpi

17

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/{73a6fe31-595d-460b- a920-fcc0f8843232}.xpi

18

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/permissions.sqlite

19

/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fram ework/Versions/A/Resources/Extras2.rsrc

20

/System/Library/Frameworks/CoreImage.framework/ci_kernels.metallib

21

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/C/org.mozilla.firefox/com .apple.metal/libraries.maps

22

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/C/org.mozilla.firefox/com .apple.metal/libraries.data

23

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/C/org.mozilla.firefox/com .apple.metal/Intel Iris Pro Graphics/functions.maps

24

/private/var/folders/hs/cfs5v5491qj3psgh5ll_q8880000gn/C/org.mozilla.firefox/com .apple.metal/Intel Iris Pro Graphics/functions.data

25

->0x71deca418781d417

26

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/uBlock0@raymondhill.ne t.xpi

27

->0x71deca418781cb7f

28

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/cookies.sqlite-wal

29

->0x71deca418781c6cf

30

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/webappsstore.sqlite

31

->0x71deca418781d737

32

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/cookies.sqlite

33

->0x71deca418781e9f7

34

->0x71deca418781dfcf

35

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/cookies.sqlite-shm

36

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/webappsstore.sqlite-wal

37

->0x71deca418781cc47

38

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/webappsstore.sqlite-shm

39

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/webappsstore.sqlite

40

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/webappsstore.sqlite-wal

41

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/content-prefs.sqlite

42

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/cert8.db

43

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/key3.db

44

45

->0x71deca418781d4df

46

/Applications/Firefox.app/Contents/Resources/browser/features/followonsearch@mozilla.com.xpi

48

/Applications/Firefox.app/Contents/Resources/browser/features/screenshots@mozilla.org.xpi

49

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite

50

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite-wal

51

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite-shm

52

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite

53

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite-wal

54

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite-shm

55

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite

56

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite-wal

57

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite

58

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite-wal

59

localhost:56187->localhost:49226

60

->0x71deca418781ce9f

61

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/OfflineCache/ind ex.sqlite

62

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite

63

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite-wal

64

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite

65

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite-wal

66

localhost:56127->localhost:49226

67

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/formhistory.sqlite

69

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/cookies.sqlite

70

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite

72

localhost:56498->localhost:49226

73

->0x71deca4179771d77

74

localhost:56199->localhost:49226

75

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/places.sqlite-wal

76

/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fram ework/Versions/A/Resources/HIToolbox.rsrc

77

/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fram ework/Versions/A/Resources/English.lproj/Localized.rsrc

78

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite

79

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/favicons.sqlite-wal

84

->0x71deca419d88215f

85

localhost:56138->localhost:49226

93

localhost:55811->localhost:49226

96

->0x71deca4180898f67

97

localhost:56218->localhost:49226

98

localhost:56417->localhost:49226

99

->0x71deca419d87feff

106

localhost:56441->localhost:49226

116

->0x71deca419d88085f

NOW I'M GOING TO PASTE THE FIREFOX WEB CONTENT THING

cwd

/

txt

/Applications/Firefox.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plu gin-container

txt

/Applications/Firefox.app/Contents/MacOS/libplugin_child_interpose.dylib

txt

/Applications/Firefox.app/Contents/MacOS/libnss3.dylib

txt

/Applications/Firefox.app/Contents/MacOS/XUL

txt

/Applications/Firefox.app/Contents/MacOS/libmozglue.dylib

txt

/Applications/Firefox.app/Contents/MacOS/liblgpllibs.dylib

txt

/Applications/Firefox.app/Contents/Resources/browser/features/followonsearch@mozilla.com.xpi

txt

/usr/share/icu/icudt57l.dat

txt

/Applications/Firefox.app/Contents/Resources/omni.ja

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/features/{381aa27a-785b-fc44-b2cb-de6b7704b45e}/shield-recipe-client@mozilla.org.xpi

txt

/System/Library/Caches/com.apple.IntlDataCache.le.kbdx

txt

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/VibrantL ightAppearance.car

txt

/Applications/Firefox.app/Contents/MacOS/libsoftokn3.dylib

txt

/Applications/Firefox.app/Contents/MacOS/libfreebl3.dylib

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/uBlock0@raymondhill.ne t.xpi

txt

/System/Library/Fonts/LastResort.ttf

txt

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/SystemAp pearance.car

txt

/System/Library/Fonts/ArialHB.ttc

txt

/Library/Fonts/STIXIntUpReg.otf

txt

/usr/lib/dyld

txt

/Applications/Firefox.app/Contents/Resources/browser/omni.ja

txt

/Applications/Firefox.app/Contents/Resources/icudt59l.dat

txt

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/Assets.c ar

txt

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/{73a6fe31-595d-460b- a920-fcc0f8843232}.xpi

txt

/Library/Fonts/Verdana.ttf

txt

/System/Library/Fonts/SFNSText.ttf

txt

/System/Library/Fonts/SFNSDisplay.ttf

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W3.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W6.ttc

txt

/System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources/AppleKeyboardLayouts-L.d at

txt

/Library/Fonts/Bodoni Ornaments.ttf

txt

/Library/Fonts/STIXSizTwoSymReg.otf

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe6\x98\x8e\xe6\x9c\x9d ProN W3.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe6\x98\x8e\xe6\x9c\x9d ProN W6.ttc

txt

/Library/Fonts/Songti.ttc

txt

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/startupCache/scr iptCache-child-current.bin

txt

/System/Library/Fonts/Apple Braille Outline 6 Dot.ttf

txt

/Library/Fonts/PlantagenetCherokee.ttf

txt

/Library/Fonts/STIXSizFourSymReg.otf

txt

/Applications/Firefox.app/Contents/Resources/browser/features/firefox@getpocket.com.xpi

txt

/Library/Fonts/STIXSizOneSymReg.otf

txt

/Library/Fonts/STIXSizThreeSymReg.otf

txt

/Library/Fonts/Arial Bold.ttf

txt

/Applications/Firefox.app/Contents/MacOS/libmozavutil.dylib

txt

/Library/Fonts/STIXSizFiveSymReg.otf

txt

/System/Library/Fonts/Helvetica.dfont

txt

/System/Library/Fonts/Times.dfont

txt

/Library/Fonts/Trebuchet MS Bold.ttf

txt

/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAHALPlugIn.bund le/Contents/MacOS/AppleHDAHALPlugIn

txt

/Library/Fonts/Verdana Bold Italic.ttf

txt

/Library/Fonts/Verdana Bold.ttf

txt

/System/Library/PrivateFrameworks/CoreNLP.framework/Versions/A/CoreNLP

txt

/Library/Fonts/NISC18030.ttf

txt

/Library/Fonts/Bodoni 72 OS.ttc

txt

/Library/Fonts/ITFDevanagari.ttc

txt

/Library/Fonts/Webdings.ttf

txt

/Library/Fonts/Gurmukhi MN.ttc

txt

/Library/Fonts/STIXGeneralItalic.otf

txt

/Library/Fonts/Trebuchet MS Bold Italic.ttf

txt

/Library/Fonts/Comic Sans MS Bold.ttf

txt

/System/Library/CoreServices/Encodings/libJapaneseConverter.dylib

txt

/Library/Fonts/Times New Roman Bold.ttf

txt

/Library/Fonts/STIXGeneralBol.otf

txt

/System/Library/Extensions/AppleIntelHSWVA.bundle/Contents/MacOS/AppleIntelHSWVA

txt

/Library/Fonts/Times New Roman Italic.ttf

txt

/System/Library/Fonts/Optima.ttc

txt

/Library/Fonts/Tamil MN.ttc

txt

/Library/Fonts/Waseem.ttc

txt

/System/Library/Fonts/Symbol.ttf

txt

/Library/Fonts/STIXNonUni.otf

txt

/Library/Fonts/STIXIntSmReg.otf

txt

/Library/Fonts/STIXVar.otf

txt

/System/Library/Fonts/HelveticaNeue.dfont

txt

/Library/Fonts/Chalkduster.ttf

txt

/Library/Fonts/DIN Condensed Bold.ttf

txt

/Library/Fonts/STIXIntUpDReg.otf

txt

/System/Library/Fonts/MarkerFelt.ttc

txt

/Library/Fonts/Bangla Sangam MN.ttc

txt

/Library/Fonts/Lao Sangam MN.ttf

txt

/System/Library/Fonts/Apple Color Emoji.ttc

txt

/Library/Fonts/Arial Unicode.ttf

txt

/Library/Fonts/SuperClarendon.ttc

txt

/Library/Fonts/Hoefler Text.ttc

txt

/Library/Fonts/Baskerville.ttc

txt

/Library/Fonts/Telugu MN.ttc

txt

/System/Library/Fonts/AppleSDGothicNeo.ttc

txt

/Library/Fonts/Iowan Old Style.ttc

txt

/Library/Fonts/Apple Chancery.ttf

txt

/Library/Fonts/Didot.ttc

txt

/Library/Fonts/Arial Black.ttf

txt

/Library/Fonts/EuphemiaCAS.ttc

txt

/Library/Fonts/Copperplate.ttc

txt

/System/Library/Fonts/Avenir Next.ttc

txt

/Library/Fonts/Tahoma.ttf

txt

/Library/Fonts/Malayalam Sangam MN.ttc

txt

/Library/Fonts/Beirut.ttc

txt

/Library/Fonts/Malayalam MN.ttc

txt

/Library/Fonts/NewPeninimMT.ttc

txt

/Library/Fonts/Kokonor.ttf

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W0.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W1.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W2.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W4.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W5.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W7.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W8.ttc

txt

/System/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x 8e\xe8\xa7\x92\xe3\x82\xb3\xe3\x82\x99\xe3\x82\xb7\xe3\x83\x83\xe3\x82\xaf W9.ttc

txt

/Library/Fonts/Sathu.ttf

txt

/System/Library/Fonts/ZapfDingbats.ttf

txt

/System/Library/Fonts/STHeiti Light.ttc

txt

/System/Library/Fonts/STHeiti Medium.ttc

txt

/Library/Fonts/Georgia.ttf

txt

/Library/Fonts/Mishafi.ttf

txt

/System/Library/Fonts/Kohinoor.ttc

txt

/Library/Fonts/Herculanum.ttf

txt

/Library/Fonts/Oriya Sangam MN.ttc

txt

/System/Library/Fonts/Palatino.ttc

txt

/Library/Fonts/SukhumvitSet.ttc

txt

/Library/Fonts/Arial.ttf

txt

/Library/Fonts/Baghdad.ttc

txt

/Library/Fonts/Wingdings.ttf

txt

/System/Library/Fonts/PingFang.ttc

txt

/Library/Fonts/GillSans.ttc

txt

/Library/Fonts/PTSans.ttc

txt

/Library/Fonts/Bangla MN.ttc

txt

/Library/Fonts/Kannada Sangam MN.ttc

txt

/System/Library/Fonts/KohinoorBangla.ttc

txt

/Library/Fonts/Farah.ttc

txt

/Library/Fonts/KufiStandardGK.ttc

txt

/Library/Fonts/Myanmar Sangam MN.ttc

txt

/System/Library/Fonts/Monaco.dfont

txt

/Library/Fonts/Kefa.ttc

txt

/Library/Fonts/Diwan Kufi.ttc

txt

/Library/Fonts/PTSerifCaption.ttc

txt

/Library/Fonts/Shree714.ttc

txt

/System/Library/Fonts/Menlo.ttc

txt

/Library/Fonts/Farisi.ttf

txt

/Library/Fonts/InaiMathi.ttf

txt

/Library/Fonts/Andale Mono.ttf

txt

/Library/Fonts/Khmer MN.ttc

txt

/System/Library/Fonts/Apple Symbols.ttf

txt

/Library/Fonts/AmericanTypewriter.ttc

txt

/Library/Fonts/Myanmar MN.ttc

txt

/Library/Fonts/Cochin.ttc

txt

/Library/Fonts/DevanagariMT.ttc

txt

/Library/Fonts/Nadeem.ttc

txt

/Library/Fonts/Khmer Sangam MN.ttf

txt

/Library/Fonts/Futura.ttc

txt

/Library/Fonts/DIN Alternate Bold.ttf

txt

/Library/Fonts/Gurmukhi.ttf

txt

/Library/Fonts/Diwan Thuluth.ttf

txt

/Library/Fonts/\xe3\x83\x92\xe3\x83\xa9\xe3\x82\xad\xe3\x82\x99\xe3\x83\x8e\xe4\ xb8\xb8\xe3\x82\xb3\xe3\x82\x99 ProN W4.ttc

txt

/Library/Fonts/Marion.ttc

txt

/Library/Fonts/Bradley Hand Bold.ttf

txt

/Library/Fonts/Luminari.ttf

txt

/Library/Fonts/Krungthep.ttf

txt

/System/Library/Fonts/Hiragino Sans GB W3.ttc

txt

/System/Library/Fonts/Hiragino Sans GB W6.ttc

txt

/System/Library/Fonts/Courier.dfont

txt

/Library/Fonts/Arial Rounded Bold.ttf

txt

/Library/Fonts/Gurmukhi Sangam MN.ttc

txt

/System/Library/Fonts/Avenir Next Condensed.ttc

txt

/Library/Fonts/Arial Narrow.ttf

txt

/Library/Fonts/Sinhala MN.ttc

txt

/Library/Fonts/Impact.ttf

txt

/Library/Fonts/SnellRoundhand.ttc

txt

/Library/Fonts/Chalkboard.ttc

txt

/Library/Fonts/Zapfino.ttf

txt

/Library/Fonts/Charter.ttc

txt

/Library/Fonts/Tamil Sangam MN.ttc

txt

/Library/Fonts/Wingdings 3.ttf

txt

/Library/Fonts/Trebuchet MS.ttf

txt

/Library/Fonts/Kannada MN.ttc

txt

/Library/Fonts/Seravek.ttc

txt

/Library/Fonts/Kailasa.ttc

txt

/Library/Fonts/Savoye LET.ttc

txt

/Library/Fonts/AlBayan.ttc

txt

/System/Library/Fonts/Thonburi.ttc

txt

/System/Library/Fonts/KohinoorTelugu.ttc

txt

/Library/Fonts/Microsoft Sans Serif.ttf

txt

/Library/Fonts/Oriya MN.ttc

txt

/Library/Fonts/DecoTypeNaskh.ttc

txt

/Library/Fonts/Trattatello.ttf

txt

/Library/Fonts/Times New Roman.ttf

txt

/Library/Fonts/Comic Sans MS.ttf

txt

/Library/Fonts/Skia.ttf

txt

/Library/Fonts/Bodoni 72.ttc

txt

/Library/Fonts/PTMono.ttc

txt

/Library/Fonts/Lao MN.ttc

txt

/Library/Fonts/Athelas.ttc

txt

/Library/Fonts/Devanagari Sangam MN.ttc

txt

/Library/Fonts/STIXGeneral.otf

txt

/Library/Fonts/BigCaslon.ttf

txt

/Library/Fonts/STIXIntDReg.otf

txt

/Library/Fonts/Al Nile.ttc

txt

/Library/Fonts/Phosphate.ttc

txt

/Library/Fonts/Corsiva.ttc

txt

/Library/Fonts/Courier New.ttf

txt

/Library/Fonts/Sana.ttc

txt

/Library/Fonts/Wingdings 2.ttf

txt

/Library/Fonts/Muna.ttc

txt

/Library/Fonts/GujaratiMT.ttc

txt

/System/Library/Fonts/Noteworthy.ttc

txt

/Library/Fonts/ChalkboardSE.ttc

txt

/Library/Fonts/STIXIntUpSmReg.otf

txt

/Library/Fonts/Raanana.ttc

txt

/System/Library/Fonts/Geneva.dfont

txt

/Library/Fonts/AppleMyungjo.ttf

txt

/Library/Fonts/Silom.ttf

txt

/Library/Fonts/AppleGothic.ttf

txt

/Library/Fonts/Gujarati Sangam MN.ttc

txt

/Library/Fonts/Ayuthaya.ttf

txt

/Library/Fonts/Bodoni 72 Smallcaps Book.ttf

txt

/Library/Fonts/Papyrus.ttc

txt

/Library/Fonts/PTSerif.ttc

txt

/Library/Fonts/Mshtakan.ttc

txt

/Library/Fonts/Brush Script.ttf

txt

/System/Library/Fonts/GeezaPro.ttc

txt

/System/Library/Fonts/Avenir.ttc

txt

/System/Library/Fonts/LucidaGrande.ttc

txt

/Library/Fonts/Mishafi Gold.ttf

txt

/Library/Fonts/Telugu Sangam MN.ttc

txt

/Library/Fonts/Al Tarikh.ttc

txt

/Library/Fonts/Damascus.ttc

txt

/Library/Fonts/SignPainter.ttc

txt

/Library/Fonts/Sinhala Sangam MN.ttc

txt

/System/Library/Fonts/SFNSTextItalic.ttf

txt

/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLRendererFloat .bundle/GLRendererFloat

txt

/Library/Fonts/Verdana Italic.ttf

txt

/Library/Fonts/Times New Roman Bold Italic.ttf

txt

/Library/Fonts/Arial Italic.ttf

txt

/Library/Fonts/Arial Bold Italic.ttf

txt

/Applications/Firefox.app/Contents/MacOS/libmozavcodec.dylib

txt

/System/Library/Components/AudioCodecs.component/Contents/MacOS/AudioCodecs

txt

/Library/Fonts/Courier New Bold.ttf

txt

/Library/Fonts/Tahoma Bold.ttf

txt

/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fram ework/Versions/A/Resources/Extras2.rsrc

txt

/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLEngine.bundle /GLEngine

txt

/System/Library/Extensions/AppleIntelHD5000GraphicsGLDriver.bundle/Contents/MacO S/AppleIntelHD5000GraphicsGLDriver

txt

/Library/Fonts/Trebuchet MS Italic.ttf

txt

/System/Library/Components/CoreAudio.component/Contents/MacOS/CoreAudio

txt

/Library/Fonts/Georgia Bold.ttf

txt

/Library/Fonts/Georgia Bold Italic.ttf

txt

/usr/share/langid/langid.inv

txt

/System/Library/Fonts/HelveticaNeueDeskInterface.ttc

txt

/System/Library/Extensions/AppleIntelHD5000GraphicsVADriver.bundle/Contents/MacO S/AppleIntelHD5000GraphicsVADriver

0

/dev/null

1

/dev/null

2

/dev/null

3

->0x71deca418781e92f

4

/Applications/Firefox.app/Contents/Resources/omni.ja

5

/Applications/Firefox.app/Contents/Resources/browser/omni.ja

6

count=0, state=0xa

7

->0x71deca418660217f

8

->0x71deca41866026bf

9

->0x71deca4186601dbf

10

/Applications/Firefox.app/Contents/Resources/browser/features/firefox@getpocket.com.xpi

11

->0x71deca418781d66f

12

->0x71deca418781e547

13

->0x71deca418781d1bf

14

->0x71deca418781cdd7

15

->0x71deca418781e60f

16

->0x71deca41865fffbf

17

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/features/{381aa27a-785b-fc44-b2cb-de6b7704b45e}/shield-recipe-client@mozilla.org.xpi

18

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/{73a6fe31-595d-460b- a920-fcc0f8843232}.xpi

19

/Users/macuser/Library/Caches/Firefox/Profiles/5dthw65b.default/startupCache/scr iptCache-child-current.bin

20

->0x71deca418781d287

21

/Applications/Firefox.app/Contents/Resources/browser/features/followonsearch@mozilla.com.xpi

22

/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.fram ework/Versions/A/Resources/Extras2.rsrc

25

->0x71deca4180899d77

27

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/uBlock0@raymondhill.ne t.xpi

28

->0x71deca419d8826d7

29

->0x71deca418781e6d7

30

/Users/macuser/Library/Application Support/Firefox/Profiles/5dthw65b.default/extensions/trash/uBlock0@raymondhill.ne t.xpi

31

->0x71deca419d8811bf

33

->0x71deca419d882227

MacBook Pro (Retina, 15-inch, Mid 2014)

Posted on Nov 8, 2017 6:59 PM

Reply

Answer 1

Top-ranking reply

John Galt

Level 10

156,566 points

Nov 9, 2017 7:35 PM in response to macsnotgnu

I'm really not interested in debating the merits of using any non-Apple "anti-virus" junk. As far as I am concerned that discussion is over before it began. It's a waste of my time and yours.

These days, you can pick up a javascript virus embedded in a .jpg file, so nobody is safe.

Wrong. Javascript is Javascript, no more and no less, and there are plenty of bad examples of it. JS can easily be used to create websites that monopolize Firefox or any other browser to become effectively unusable and monopolize a Mac as long as they're running, but what JS cannot do is disseminate a "virus".

Using "Sophos" will never prevent you from willfully installing junk, nor will it prevent a website from monopolizing your Mac—as it appears to be in your case. Restart Firefox in "safe mode" to diagnose that possibility: Troubleshoot Firefox issues using Safe Mode | Firefox Help.

That's all there is to conclude from the information you posted. There is no reason to suspect anything malicious is installed on your Mac.

Reply

Answer 2

John Galt

Level 10

156,566 points

Nov 8, 2017 7:40 PM in response to macsnotgnu

The first step in diagnosing a misbehaving Mac is to rid it of utterly useless garbage. Uninstall any and all non-Apple "anti-virus" junk you installed. As you determined already, it did nothing to identify the behavior you describe, and might even be its direct cause.

Based solely on the symptoms you describe it is premature to suspect your Mac is mining bitcoin. It can simply be caused by misbehaving Firefox webpage content. That's common, but you won't even be able to get to Step 1 until you uninstall the junk, so do that now. Follow their respective instructions to the letter. Create a Time Machine or equivalent backup if you haven't done that already.

But I don't know what to submit, there are too many files.

Yes there are. No one is going to read through the list of files you posted, and they won't help.

Start at the beginning by using Activity Monitor according to Use Activity Monitor on your Mac - Apple Support. Sort by %CPU but choose All Processes (not My Processes) as shown in its screenshot. Post a screenshot of your Activity Monitor with it configured that way. Please don't capture or post any information you consider personal.

Then, please post the contents of each of the following folders:

~/Library/LaunchAgents

/Library/LaunchAgents/

/Library/LaunchDaemons/

/Library/Application Support/

To navigate to them, copy and paste each one of the above lines into the Finder's Go menu > Go to Folder... field. Each of those folders probably contain sufficiently few items so that a screenshot can capture all of them, but you can provide a list if you prefer.

Reply

Answer 3

thomas_r.

Level 7

32,031 points

Nov 9, 2017 7:00 AM in response to macsnotgnu

macsnotgnu wrote:

These days, you can pick up a javascript virus embedded in a .jpg file, so nobody is safe.

That is not actually true.

Apple doesn't push hourly or even daily security updates, as far as I know.

That is true. Apple does have some anti-malware features, and they do push updates for them, but only as needed. You're right not to assume that Apple is protecting you from all threats that exist out there, as that definitely wouldn't be true.

Reply

Answer 4

macsnotgnu Author

Level 1

18 points

Nov 8, 2017 9:03 PM in response to John Galt

Images posted here: Imgur: The most awesome images on the Internet

These days, you can pick up a javascript virus embedded in a .jpg file, so nobody is safe. Apple doesn't push hourly or even daily security updates, as far as I know. But I appreciate your opinion and help. I've uninstalled all I can. Sophos uses very few resources, I've used it for years, and it never causes any conflicts or problems. Not extremely effective, but sometimes it finds something, usually a windows virus on an external drive. Comodo and Malwarebytes were installed after the problem started, in order to try to find the problem. They're both legit, but I uninstalled them for now. I uninstalled VyperVPN because I don't use that at the moment. That is all that has changed.

Thanks, I prefer to use the command prompt.

macs-MacBook-Pro:~ macuser$ pwd

/Users/macuser

macs-MacBook-Pro:~ macuser$ ls Library/LaunchAgents

com.google.keystone.agent.plist

com.spotify.webhelper.plist

com.skype.skype.shareagent.plist

com.valvesoftware.steamclean.plist

macs-MacBook-Pro:~ macuser$ ls /Library/LaunchAgents

com.displaylink.useragent-prelogin.plist

com.displaylink.useragent.plist

com.pharos.notify.plist

com.pharos.popup.plist

com.sophos.agent.plist

com.sophos.uiserver.plist

macs-MacBook-Pro:~ macuser$ ls /Library/LaunchDaemons

com.displaylink.displaylinkmanager.plist

com.microsoft.autoupdate.helper.plist

com.microsoft.office.licensingV2.helper.plist

com.sophos.common.servicemanager.plist

macs-MacBook-Pro:~ macuser$ ls "/Library/Application Support"

App Store

Microsoft

SubmitDiagInfo

Apple

Pharos

com.apple.TCC

ApplePushService

ProApps

iLifeMediaBrowser

CrashReporter

Script Editor

DisplayLink

Sophos

Reply

Answer 5

thomas_r.

Level 7

32,031 points

Nov 9, 2017 3:38 PM in response to macsnotgnu

I look at the Activity Monitor and see a process titled "firefox" is eating 65% of my CPU (and every time this happens, it is always exactly 65%) so I close firefox. But that doesn't kill the process. And there is this other thing called Firefox Web Content (Not Responding) which is always eating gigabytes of my memory.

All that means is that Firefox is having some kind of problem. That certainly could be due to a cryptocurrency-mining JavaScript running on a site you are visiting, but it also could just be that Firefox isn't working properly on your machine, or you have too many tabs open, or you have too many Firefox add-ons installed, or you have a bad Firefox add-on installed, etc.

Its important to understand that JavaScript-based miners that run in the browser are not malware. They aren't infecting your machine, and when you navigate away from that site they are gone. Some sites are using this in preference to ads as a way to make money, and there are actually some people out there who prefer to give up some CPU cycles in exchange for no more obnoxious ads and the tracking that they involve.

Reply