mds_storesSafe

What is mds_stores?

Publisher: Apple Inc.Typical location: /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framework/Versions/A/Support/mds_stores

mds_stores is a legitimate macOS system process from Apple. It is part of Spotlight, the built-in search feature on your Mac, and helps keep search results and file metadata up to date.

What it does

mds_stores works with Spotlight’s indexing system. It stores and updates metadata about files so your Mac can quickly search apps, documents, emails, and other content. You may notice it using CPU or disk while your Mac is indexing after a restart, a macOS update, or when many files have changed.

Is it safe?

Yes, the real mds_stores process is safe and should be left alone. However, malware can sometimes disguise itself using this exact name. To verify the genuine file, check that it is signed by Apple Inc. and located in the standard macOS system path, not in a user folder, Downloads, or another unusual location.

Why it causes high CPU or disk usage

  • 1Spotlight is indexing after a restart or macOS update
  • 2Many files were added, moved, or changed recently
  • 3An external drive or network volume is being indexed
  • 4Spotlight is reindexing after a search database issue
  • 5Low free disk space can slow indexing

How to check if it's legitimate

  1. Open Activity Monitor and find mds_stores.
  2. Right-click it and choose Inspect or Open Files and Ports if available.
  3. Confirm the process is running from the Apple system location, not from a random folder in your home directory, Downloads, or Applications.
  4. If you want extra reassurance, check the file’s signature in Finder or with macOS security tools. The legitimate file should show Apple Inc. as the publisher/signing authority.

How to remove it

You should not try to remove the real mds_stores process because it is part of macOS. If it is using a lot of CPU or disk, the usual fix is to let Spotlight finish indexing, restart your Mac, update macOS, or free up disk space. If the process is running from an unexpected path or is not signed by Apple, treat it as suspicious and run a malware scan instead of deleting system files manually.

Need more help?

Run a free diagnostic scan to identify and fix issues automatically.

Download Quickfix AI