Sure, it is the apache web server who is invoking a section of code to create a temporary directory and copy some zip files into it. The apache server uses the same account as the zip file owner.