mdls
SafeShow file metadata
mdls <file>
Dumps Spotlight metadata; kMDItemWhereFroms reveals where a file was downloaded from.
Examples
mdls -name kMDItemWhereFroms suspicious.dmgCheck the download origin
Syntax
mdls [-name attr] <file>
Before you run it
Read only.
The same reference, with no signal at all
Every command on this site, held on your device. The app adds 632 more: 1,510 commands and 120 fix flows, searchable with no connection. Free to install, no ads (some content is a one-time purchase).
Get it free on the App Store