Strange Files in /tmp Folder

No, this is not malware. These files are completely legitimate system components native to your hardware setup

You are seeing them on your MacBook Pro M5 but not your M3 because "Centauri" is the internal Apple codename for the new cellular/wireless chip architecture introduced with the M5-generation Mac platform (associated with Apple's custom N1/C1 wireless connectivity chips).

Looks legitimate, not like malware.

The important clue is that /tmp/Centauri and /tmp/FTABHarvest are recreated after reboot and the centauri-symlink-ftab.bin points into /System/Volumes/Preboot/.../usr/standalone/firmware/Centauri/ftab.bin. That is consistent with macOS staging or exposing hardware firmware resources during boot, and /tmp is deliberately used for temporary runtime files.

The fact that an M3 running the same macOS version doesn't have them also makes sense because the M5 has different hardware/firmware components.

I wouldn't also install a cleaner or schedule deletion here.. deleting these files is unlikely to free meaningful storage, and macOS will simply recreate them when the related firmware component needs them. If they disappear when the Mac is shut down and reappear after boot, that's another strong indication they're being generated by a system service rather than behaving like persistent malware.

The more useful question would be whether there's an actual symptom associated with them, such as Wi-Fi/Bluetooth failures, kernel panics, unusual CPU usage, or repeated firmware errors in the logs.

nazeeshkhan wrote:

Could someone explain what these files in my /temp folder are:

/tmp/Centauri

- wifi-assert-strings.bin

/tmp/FTABHarvest

- centauri-symlink-ftab.bin

Centauri-symlink-ftab.bin is posting to /system/volumes/preboot/.../usr/standalone/firmware/Centauri/ftab.bin.

These files exist even after using Erase All Content and Settings.... Are these files legit or is this Malware? Anyone else having these files? I am using a MacBook Pro M5 with Tahoe 26.5.2. The reason why I raise this question is because my other MacBook Pro M3 (also with Tahoe 26.5.2) doesn't have these files.

When I delete the files, they will be automatically re-added after a reboot.

And what is the associated issue...?

If it ain't broke don't fix it.