    Mac OS X            	   2                                             ATTR                                   %com.apple.metadata:kMDItemWhereFroms        com.apple.provenance      A  com.apple.quarantine bplist00_fimap://muelstef@mailbox.cms.hu-berlin.de:993/fetch%3EUID%3E/INBOX%3E126944?part=1.3&filename=rules.txtPt                            u  Zq/0281;67d09d48;Thunderbird;452080FC-9ECB-4DF8-B2D2-0AA082BED45D 