After a full system scan following up on a separate problem (details here: https://forum.avast.com/index.php?topic=204289.0), Avast found the JavaScript trojan (JS:ScriptPE-inf [Trj]) file (a {gzip}) listed in the Cache subdirectory of my Application Support folder; filepath: /Users/username/Library/Application Support/Raindrop.io/Cache/f_000560
I’m running macOS Sierra Version 10.12.5 on a 2016 Macbook Pro.
This has me genuinely curious, since Avast never threw any errors/popups for it; it never surfaced until the scan.
I found some related Avast posts: https://forum.avast.com/index.php?action=search2
As well as a decent write-up on the kind of file:
Anyway, some Google searching suggests it might be a keylogger, although I’m not entirely certain. This write-up on the f_000560 error reinforces that hunch: http://www.printerrorfixnow.com/exe-error/f_000560.html
I isolated the file w/the Avast Virus Chest and am going to delete it, so we’ll see if it works. I’ll report if it resurfaces.