{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294969096":[{"is_tail_call":false,"symbol":"__stderrp","target_va":4294969504},{"is_tail_call":false,"symbol":"fprintf","target_va":4294969536},{"is_tail_call":false,"symbol":"atoi","target_va":4294969520},{"is_tail_call":false,"symbol":"perror","target_va":4294969568},{"is_tail_call":false,"symbol":"atoi","target_va":4294969520},{"is_tail_call":false,"symbol":"getgrnam","target_va":4294969552}]},"data_xrefs":{"by_data":{"4294969584":[4294969096],"4294969610":[4294969096],"4294983680":[4294969096],"4294983696":[4294969096],"4294983720":[4294969096]},"by_function":{"4294969096":[{"data_va":4294983720,"insn_va":4294969296,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969300,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969308,"kind":"Global","value":null},{"data_va":4294969584,"insn_va":4294969332,"kind":"CString","value":"%s: group '%s' not found\n"},{"data_va":4294983696,"insn_va":4294969360,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294969396,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969400,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969408,"kind":"Global","value":null},{"data_va":4294969610,"insn_va":4294969432,"kind":"CString","value":"%s: invalid group '%s'\n"},{"data_va":4294983680,"insn_va":4294969444,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294969096":"main"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"ee152a0dd7908ac90f2fbd91aa784c368ef7d449b7e3bd01682db42dc6cd441a","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.checkgid","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"3ba3283a0a5a81a543fbe3f5bcae742e52c6be41c909933b66403fdda4b7d5a4","imphash":"0d6e4079e36703ebd37c00722f5891d28b0e2811dc114b129215123adcce3605","sha256_text":"bf8580b97bf14ca176436612fd498a08abef8b4d0985b6109d2f2634e918c0be","symbolhash":"0d6e4079e36703ebd37c00722f5891d28b0e2811dc114b129215123adcce3605"},"sets":{"apis_called":["__stderrp","atoi","fprintf","getgrnam","perror"],"bundle_ids":["com.apple.checkgid"],"cpp_classes":[],"entitlements":[],"frameworks":["CoreFoundation","libcrypto.46.dylib","libssl.48.dylib","libaprutil-1.0.dylib","libexpat.1.dylib","libiconv.2.dylib","libsqlite3.dylib","LDAP","libapr-1.0.dylib","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":["com.apple.checkgid"]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":2,"frameworks_private":0,"frameworks_total":10,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":6,"size_log2":16.623653,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.004040564,"url_endpoints":4,"xpc_provides":1}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"},{"address":1800,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"main"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:10Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"ee152a0dd7908ac90f2fbd91aa784c368ef7d449b7e3bd01682db42dc6cd441a","file_modified":"2026-04-06T12:08:57Z","file_size":100976,"is_arm64e":true,"min_os":"11.0.0","name":"checkgid","platform":"macOS","sdk":"26.1.0","sha256":"1280d071cc2f6806df224d94ce07fcd505390cee32bf6d908571ee7ed8cdc5a4","sha256_slice":"25ab59ce2e65e804f7637c6d57c4737112a666eb1d9b3c61e024cf9f5742bf2f","source_version":"880.0.0.0.0","team_id":null,"uuid":"7F33888B-1108-309C-A80F-519A9D179EA8"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libcrypto.46.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libssl.48.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libaprutil-1.0.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libexpat.1.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libiconv.2.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libsqlite3.dylib"},{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libapr-1.0.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"atoi"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getgrnam"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"perror"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"setgid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"}],"interesting_strings":{"bundle_ids":["com.apple.checkgid"],"file_paths":["/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation","/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":["CoreFoundation"]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1800,"protection":"r-x","segment":"__TEXT","size":408},{"name":"__auth_stubs","offset":2208,"protection":"r-x","segment":"__TEXT","size":80},{"name":"__cstring","offset":2288,"protection":"r-x","segment":"__TEXT","size":50},{"name":"__unwind_info","offset":2340,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":40},{"name":"__got","offset":16424,"protection":"rw-","segment":"__DATA_CONST","size":8}],"summary":"Implements a single primary function exposed through an XPC service for inter-process communication with other system components. Communicates with six network endpoints to exchange data or retrieve configuration. Operates with Apple's code signature validation. Contains minimal embedded logic, functioning primarily as a routing or delegation layer between clients and backend services or network resources.","swift_metadata":null,"title":"System service — manages XPC communication and network operations","total_strings":113,"xpc_services":["com.apple.checkgid"]}