some quick tips about viewing files associated with process.
lsof -h→ show a short help file
lsof fpath→ show all associated with file fpath
lsof -i→ list files associated with internet (⁖ browser process)
lsof -u name→ login/uid
lsof -p pid→ pid.
lsof +d dir→ by dir path dir
lsof +D dir→ by dir path dir, also show all dir's children
lsof -c cmd→ show files opened by command whose name starts with cmd