Table of Contents

Extendend Attributes

General

com.apple.quarantine

File Quarantine is a new feature in Leopard designed to protect users from trojan horse attacks. It allows applications which download file content from the Internet to place files in “quarantine” to indicate that the file could be from an untrustworthy source. An application quarantines a file simply by assigning values to one or more quarantine properties which preserve information about when and where the file come from.

When the Launch Services API is used to open a quarantined file and the file appears to be an application, script, or other executable file type, Launch Services will display an alert to confirm the user understands the file is some kind of application.
(Source: Apple Developer)

The hex number is a date which can be decoded with the date command: 

~ $ ls -l -@ Filename
-rw-------@ 1 user  staff  0 Oct  7 05:18 Filename
        com.apple.quarantine    30 
~ $ xattr -p com.apple.quarantine Filename
0000;59d84776;MySoftware.app;
~ $ date -r 0x59d84776                 
Sat Oct  7 05:18:14 CEST 2017
~ $

Credits:

, ,

OSX extended attributes xattr