Hundreds of files in /tmp with just hex numbers for names

I have hundreds of files like the following in /tmp:


-rw------- 1 root wheel 0 Jul 11 11:30 0000000007d513ce


They were all created today or yesterday. There are some postings here that claim that this is a problem with Time Machine (see, for example, Many /tmp/6365733* files during TimeMachi… - Apple Community).


Frustratingly, I don't see any explanation of how the posters fingered TimeMachine as creating these files. If I can confirm that TimeMachine is the cause, I can just work around by setting a script to garbage collect these files. But if I can't confirm this, then I am worried that it might be something else, potentially malware.


Thanks for any advice.

MacBook Pro 16″, macOS 12.4

Posted on Jul 11, 2022 10:23 AM

Reply
6 replies

Jul 11, 2022 10:30 AM in response to rpg25

No malware or virus will be stored in the /tmp/ (which links to /private/tmp) directory.


I would not attempt to modify anything within this directory. It is a temporary directory (as the name suggests) and all files within the directory are removed once the computer has restarted. It will also clear if you turn your computer completely off and back on.


Your Mac has a lot of security features in place to prevent any malicious files or programs from executing on your system. If you did not do anything suspicious (downloading unknown programs, viewing suspicious sites, clicking links or attachments in emails, etc.) You are fine.

Jul 11, 2022 10:35 AM in response to pjswiz

It looks like these are automagically removed after 24 hours, based on what I see. But if there's something ill-behaved spewing temp files and not cleaning them up again, I would really like to know what it is.


My guess is that this is just someone's sloppy coding.


I wonder, though, if it would be possible to watch the `/tmp` directory somehow and see what is making these files. The names are absolutely regular, so I could write a regex matcher for them. But I don't know enough to capture events of file creation and identify the process involved.

Jul 11, 2022 10:35 AM in response to rpg25

rpg25 wrote:

I have hundreds of files like the following in /tmp:

-rw------- 1 root wheel 0 Jul 11 11:30 0000000007d513ce

They were all created today or yesterday. There are some postings here that claim that this is a problem with Time Machine (see, for example, Many /tmp/6365733* files during TimeMachi… - Apple Community).

Frustratingly, I don't see any explanation of how the posters fingered TimeMachine as creating these files. If I can confirm that TimeMachine is the cause, I can just work around by setting a script to garbage collect these files. But if I can't confirm this, then I am worried that it might be something else, potentially malware.

Thanks for any advice.



If no associated issues I would ignore these tmp files.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Hundreds of files in /tmp with just hex numbers for names

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.