What are these files "tmp-mount-*," and "zeb_def_ipc_*." in "/tmp" directory? Which process is creating these files?

Hi Apple Team,


I recently began noticing some unusual files in the "/tmp" directory, including "boost_interprocess," "tmp-mount-*," and "zeb_def_ipc_*." I have never encountered these types of files before. I attempted to identify which process created them but was unsuccessful. I also ran a malware scan with Malwarebytes, and it reported no issues.


Could you please advise me on how to determine which process is creating these files and the reason behind them?


Thank you!

MacBook Pro 14″, macOS 15.6

Posted on Dec 10, 2025 3:18 PM

Reply
4 replies

Dec 11, 2025 10:30 AM in response to naturetech

naturetech wrote:

And why would I install malware on my system?.


More than a little modern malware comes with a EULA, these days.


More than a little of the rest with bugs, too.


And add-on security apps, add-on firewalls, and add-on VPN apps can be somewhere between problematic and sketchy.


I had never seen these kind of files in the "tmp" directory, so wondering what these files.


How many other Macs have you checked? (Preferably, sharing some common apps.)


/tmp is somewhere between transient storage and a self-cleaning garbage dump, and is available for all apps.


What is temporarily stored there depends entirely on what apps installed, including what version of those apps, and how well it’s all (not) playing together.


Various apps and services with Zebronics and Zeb-related strings domexist, seemingly including a vendor of network-connected cameras and speakers.


If looking at the locally-installed apps and gear, and at the file contents and running tools (such as the strings command), looking for substring matches doesn’t find a culprit, and if web searches fail, then perform a clean install, incrementally add the same catalog of apps, and then see which app was the most recent installed when the files appeared. If the directories are seemingly single-use, check the names in the hierarchy as well, and maybe set some file notifications that trigger when a file gets added or removed.


Identifying specific transient files? It’s a slog. And probably fruitless, unless somebody happens to share some of the same configuration you do, or happens to otherwise recognize the particular transient files getting dropped off by some particular app. Or the file names chosen are sufficiently unique that web searches can reveal the culprit app. These aren’t.

Dec 10, 2025 5:19 PM in response to naturetech

naturetech wrote:

Could you please advise me on how to determine which process is creating these files

Not possible.


and the reason behind them?

I'm sure it's for a good reason.


This is not how malware works. If you've installed malware, on purpose, to run some illegal, pirate version of expensive software, or watch some paid video stream or sporting event for free, then the problem is the malware, not the files that it might be writing. But if you haven't installed malware, then you don't need to worry.


To be clear about this, you must have installed the malware, on purpose, and purposefully bypassed multiple levels of Appel security protection to make that happen.

Dec 11, 2025 7:41 AM in response to naturetech

The rather ironic statement, included in @etresoft's good guidance above, suggesting that "you must have installed the malware" should, I believe, be interpreted as meaning that it takes a conscious decision on the part of the user to install any software on the Mac.


Installation of malware is rarely by choice, but inadvertent or unknowing installation does happen if one lets one's guard down.


If you look through the hundreds of thousands of files on the Mac, then you will find innumerable files of all types. Some you will recognize and most (?) you won't. If you go looking for "trouble", you'll probably find it. 😉

What are these files "tmp-mount-*," and "zeb_def_ipc_*." in "/tmp" directory? Which process is creating these files?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.