Mac OS X  2aATTRcom.apple.lastuseddate#PS *$com.apple.metadata:_kMDItemUserTagsJ com.apple.provenanceU>com.apple.quarantinecmd5bplist00 !~