{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.9286698698997498,
        "class": 0
      }
    ],
    "prob": 0.92866987,
    "class": 0,
    "version": "v16.16",
    "thresholds": [
      0.9815004,
      0.99404883
    ],
    "analyzed_at": "2026-04-30T05:26:18Z"
  },
  "path": "mod_socache_memcache.so",
  "raw": {
    "v": "4",
    "fs": [
      {
        "f": "Md₂(Si)",
        "x": 4,
        "id": 0,
        "is": [
          "memcpy_chk",
          "stack_chk_fail",
          "stack_chk_guard",
          "ap_bin2hex",
          "ap_log_error_",
          "ap_mpm_query",
          "ap_register_provider",
          "ap_rprintf",
          "ap_rwrite",
          "ap_timeout_parameter_parse",
          "apr_cpystrn",
          "apr_memcache_add_server",
          "apr_memcache_create",
          "apr_memcache_delete",
          "apr_memcache_getp",
          "apr_memcache_server_create",
          "apr_memcache_set",
          "apr_memcache_stats",
          "apr_palloc",
          "apr_parse_addr_port",
          "apr_pstrcat",
          "apr_pstrdup",
          "apr_strtok",
          "apr_time_now",
          "strlen",
          "stack_chk_guard",
          "dyld_stub_binder",
          "memcpy_chk",
          "stack_chk_fail",
          "ap_bin2hex",
          "ap_log_error_",
          "ap_mpm_query",
          "ap_register_provider",
          "ap_rprintf",
          "ap_rwrite",
          "ap_timeout_parameter_parse",
          "apr_cpystrn",
          "apr_memcache_add_server",
          "apr_memcache_create",
          "apr_memcache_delete",
          "apr_memcache_getp",
          "apr_memcache_server_create",
          "apr_memcache_set",
          "apr_memcache_stats",
          "apr_palloc",
          "apr_parse_addr_port",
          "apr_pstrcat",
          "apr_pstrdup",
          "apr_strtok",
          "apr_time_now",
          "memset",
          "strlen"
        ],
        "ms": {
          "macho": {
            "flags": 4.0,
            "cpu_type": 16777228.0,
            "file_type": 8.0,
            "sdk_major": 26.0,
            "sdk_minor": 4.0,
            "class_bits": 64.0,
            "cpu_subtype": 2147483650.0,
            "slice_count": 2.0,
            "is_universal": true,
            "min_os_major": 11.0,
            "uuid_present": true,
            "little_endian": true,
            "build_platform": 1.0,
            "signature_type": "platform",
            "source_version": 971968278953984.0,
            "build_tool_count": 1.0,
            "has_code_signature": true,
            "load_command_count": 18.0,
            "load_commands_size": 1456.0,
            "code_signature_size": 18736.0,
            "build_version_present": true,
            "source_version_present": true
          },
          "binary": {
            "code_size": 5240.0,
            "file_size": 70176.0,
            "code_entropy": 5.75,
            "data_entropy": 1.85,
            "export_count": 1.0,
            "import_count": 25.0,
            "string_count": 150.0,
            "has_signature": true,
            "section_count": 8.0,
            "segment_count": 4.0,
            "avg_complexity": 2.34,
            "function_count": 38.0,
            "import_density": 4.89,
            "string_density": 29.31,
            "overall_entropy": 3.06,
            "avg_section_size": 1004.25,
            "entropy_variance": 1.54,
            "function_density": 7.43,
            "avg_function_size": 125.79,
            "avg_string_length": 27.32,
            "max_string_length": 188.0,
            "avg_string_entropy": 3.37,
            "code_to_data_ratio": 1.88,
            "data_to_file_ratio": 0.0,
            "text_to_file_ratio": 0.07,
            "provenance_id_length": 16.0,
            "string_length_stddev": 27.42,
            "largest_section_ratio": 0.07,
            "provenance_id_present": true,
            "sentence_string_count": 36.0,
            "sentence_string_ratio": 0.24,
            "nonstandard_section_name_count": 8.0
          }
        },
        "ss": [
          [
            16424,
            "__TEXT"
          ],
          [
            16488,
            "__text"
          ],
          [
            16568,
            "__stubs"
          ],
          [
            16648,
            "__stub_helper"
          ],
          [
            16728,
            "__cstring"
          ],
          [
            16808,
            "__unwind_info"
          ],
          [
            16896,
            "__DATA"
          ],
          [
            16960,
            "__got"
          ],
          [
            17040,
            "__la_symbol_ptr"
          ],
          [
            17120,
            "__const"
          ],
          [
            17200,
            "__data"
          ],
          [
            17288,
            "__LINKEDIT"
          ],
          [
            17600,
            "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
          ],
          [
            17704,
            "/usr/lib/libcrypto.46.dylib"
          ],
          [
            17760,
            "/usr/lib/libssl.48.dylib"
          ],
          [
            17816,
            "/usr/lib/libSystem.B.dylib"
          ],
          [
            19618,
            "fffff."
          ],
          [
            23102,
            "/AppleInternal/Library/BuildRoots/4~CI8cugCzo5-g8THsEtfDb569NpfrRSCNsL0UIVc/Library/Caches/com.apple.xbs/TemporaryDirectory.R1FS"
          ],
          [
            23291,
            "MemcacheConnTTL"
          ],
          [
            23307,
            "TTL used for the connection with the memcache server(s)"
          ],
          [
            23365,
            "has wrong format"
          ],
          [
            23383,
            "can only be 0 or up to one hour."
          ],
          [
            23417,
            "socache"
          ],
          [
            23425,
            "memcache"
          ],
          [
            23436,
            "List of server names required to create memcache socache."
          ],
          [
            23496,
            "AH00785: Failed to create Memcache Object of '%d' size."
          ],
          [
            23552,
            "AH00786: Failed to Parse memcache Server: '%s'"
          ],
          [
            23599,
            "AH00787: Failed to Parse Server, no hostname specified: '%s'"
          ],
          [
            23660,
            "AH00788: Failed to Create memcache Server: %s:%d"
          ],
          [
            23709,
            "AH00789: Failed to Add memcache Server: %s:%d"
          ],
          [
            23757,
            "AH00790: scache_mc: error setting key '%s' with %d bytes of data"
          ],
          [
            23822,
            "AH00791: scache_mc: 'retrieve' FAIL"
          ],
          [
            23858,
            "AH00792: scache_mc: 'retrieve' OVERFLOW"
          ],
          [
            23898,
            "AH00793: scache_mc: error deleting key '%s'"
          ],
          [
            23951,
            "Memcached server: %s:%d [%s]%s"
          ],
          [
            23986,
            "Down"
          ],
          [
            23991,
            "\u003cb\u003eVersion:\u003c/b\u003e \u003ci\u003e%s\u003c/i\u003e [%u bits], PID: \u003ci\u003e%u\u003c/i\u003e, Uptime: \u003ci\u003e%u hrs\u003c/i\u003e \u003cbr /\u003e"
          ],
          [
            24074,
            "\u003cb\u003eClients::\u003c/b\u003e Structures: \u003ci\u003e%u\u003c/i\u003e, Total: \u003ci\u003e%u\u003c/i\u003e, Current: \u003ci\u003e%u\u003c/i\u003e \u003cbr /\u003e"
          ],
          [
            24159,
            "\u003cb\u003eStorage::\u003c/b\u003e Total Items: \u003ci\u003e%u\u003c/i\u003e, Current Items: \u003ci\u003e%u\u003c/i\u003e, Bytes: \u003ci\u003e%llu\u003c/i\u003e \u003cbr /\u003e"
          ],
          [
            24253,
            "\u003cb\u003eCPU::\u003c/b\u003e System: \u003ci\u003e%u\u003c/i\u003e, User: \u003ci\u003e%u\u003c/i\u003e \u003cbr /\u003e"
          ],
          [
            24309,
            "\u003cb\u003eCache::\u003c/b\u003e Gets: \u003ci\u003e%u\u003c/i\u003e, Sets: \u003ci\u003e%u\u003c/i\u003e, Hits: \u003ci\u003e%u\u003c/i\u003e, Misses: \u003ci\u003e%u\u003c/i\u003e \u003cbr /\u003e"
          ],
          [
            24474,
            "\u003cb\u003eMisc::\u003c/b\u003e Evictions: \u003ci\u003e%llu\u003c/i\u003e, MaxMem: \u003ci\u003e%u\u003c/i\u003e, Threads: \u003ci\u003e%u\u003c/i\u003e \u003cbr /\u003e"
          ],
          [
            24570,
            "Version: %s [%u bits], PID: %u, Uptime: %u hrs %s"
          ],
          [
            24621,
            "Clients:: Structures: %d, Total: %d, Current: %u %s"
          ],
          [
            24674,
            "Storage:: Total Items: %u, Current Items: %u, Bytes: %llu %s"
          ],
          [
            24736,
            "CPU:: System: %u, User: %u %s"
          ],
          [
            24767,
            "Cache:: Gets: %u, Sets: %u, Hits: %u, Misses: %u %s"
          ],
          [
            24820,
            "Net:: Input bytes: %llu, Output bytes: %llu %s"
          ],
          [
            24868,
            "Misc:: Evictions: %llu, MaxMem: %u, Threads: %u %s"
          ],
          [
            29096,
            "42PA"
          ],
          [
            32792,
            "\u003e@___stack_chk_guard"
          ],
          [
            32817,
            "@dyld_stub_binder"
          ],
          [
            32842,
            "\u003e@___memcpy_chk"
          ],
          [
            32862,
            "\u003e@___stack_chk_fail"
          ],
          [
            32884,
            "q \u003e@_ap_bin2hex"
          ],
          [
            32902,
            "q(\u003e@_ap_log_error_"
          ],
          [
            32923,
            "q0\u003e@_ap_mpm_query"
          ],
          [
            32943,
            "q8\u003e@_ap_register_provider"
          ],
          [
            32971,
            "q@\u003e@_ap_rprintf"
          ],
          [
            32989,
            "qH\u003e@_ap_rwrite"
          ],
          [
            33006,
            "qP\u003e@_ap_timeout_parameter_parse"
          ],
          [
            33040,
            "qX\u003e@_apr_cpystrn"
          ],
          [
            33059,
            "q`\u003e@_apr_memcache_add_server"
          ],
          [
            33090,
            "qh\u003e@_apr_memcache_create"
          ],
          [
            33117,
            "qp\u003e@_apr_memcache_delete"
          ],
          [
            33144,
            "qx\u003e@_apr_memcache_getp"
          ],
          [
            33172,
            "\u003e@_apr_memcache_server_create"
          ],
          [
            33207,
            "\u003e@_apr_memcache_set"
          ],
          [
            33232,
            "\u003e@_apr_memcache_stats"
          ],
          [
            33259,
            "\u003e@_apr_palloc"
          ],
          [
            33278,
            "\u003e@_apr_parse_addr_port"
          ],
          [
            33306,
            "\u003e@_apr_pstrcat"
          ],
          [
            33326,
            "\u003e@_apr_pstrdup"
          ],
          [
            33346,
            "\u003e@_apr_strtok"
          ],
          [
            33365,
            "\u003e@_apr_time_now"
          ],
          [
            33418,
            "_socache_memcache_module"
          ],
          [
            34421,
            "___memcpy_chk"
          ],
          [
            34435,
            "___stack_chk_fail"
          ],
          [
            34453,
            "___stack_chk_guard"
          ],
          [
            34472,
            "_ap_bin2hex"
          ],
          [
            34484,
            "_ap_log_error_"
          ],
          [
            34499,
            "_ap_mpm_query"
          ],
          [
            34513,
            "_ap_register_provider"
          ],
          [
            34535,
            "_ap_rprintf"
          ],
          [
            34547,
            "_ap_rwrite"
          ],
          [
            34558,
            "_ap_timeout_parameter_parse"
          ],
          [
            34586,
            "_apr_cpystrn"
          ],
          [
            34599,
            "_apr_memcache_add_server"
          ],
          [
            34624,
            "_apr_memcache_create"
          ],
          [
            34645,
            "_apr_memcache_delete"
          ],
          [
            34666,
            "_apr_memcache_getp"
          ],
          [
            34685,
            "_apr_memcache_server_create"
          ],
          [
            34713,
            "_apr_memcache_set"
          ],
          [
            34731,
            "_apr_memcache_stats"
          ],
          [
            34751,
            "_apr_palloc"
          ],
          [
            34763,
            "_apr_parse_addr_port"
          ],
          [
            34784,
            "_apr_pstrcat"
          ],
          [
            34797,
            "_apr_pstrdup"
          ],
          [
            34810,
            "_apr_strtok"
          ],
          [
            34822,
            "_apr_time_now"
          ],
          [
            34836,
            "_memset"
          ],
          [
            34844,
            "_strlen"
          ],
          [
            34852,
            "dyld_stub_binder"
          ],
          [
            34869,
            "_create_server_config"
          ],
          [
            34891,
            "_register_hooks"
          ],
          [
            34907,
            "_socache_mc_set_ttl"
          ],
          [
            34927,
            "_socache_mc_create"
          ],
          [
            34946,
            "_socache_mc_init"
          ],
          [
            34963,
            "_socache_mc_destroy"
          ],
          [
            34983,
            "_socache_mc_store"
          ],
          [
            35001,
            "_socache_mc_retrieve"
          ],
          [
            35022,
            "_socache_mc_remove"
          ],
          [
            35041,
            "_socache_mc_status"
          ],
          [
            35060,
            "_socache_mc_iterate"
          ],
          [
            35080,
            "_socache_mc_id2key"
          ],
          [
            35099,
            "_ap_rputs"
          ],
          [
            35109,
            "_socache_memcache_cmds"
          ],
          [
            35132,
            "_socache_mc"
          ],
          [
            35144,
            "__dyld_private"
          ],
          [
            35292,
            "com.apple.mod_socache_memcache"
          ],
          [
            35748,
            "Apple Inc.1\u00260$"
          ],
          [
            35769,
            "Apple Certification Authority1"
          ],
          [
            35809,
            "Apple Root CA0"
          ],
          [
            35901,
            "Apple Certification Authority1301"
          ],
          [
            35940,
            "*Apple Code Signing Certification Authority0"
          ],
          [
            36419,
            "%http://www.apple.com/appleca/root.crl0"
          ],
          [
            36958,
            "Apple Inc.1"
          ],
          [
            36979,
            "Apple Software1"
          ],
          [
            37004,
            "Software Signing0"
          ],
          [
            37414,
            "kThis certificate is to be used exclusively for functions internal to Apple Products and/or Apple processes.0"
          ],
          [
            37564,
            "$http://crl.apple.com/codesigning.crl0"
          ],
          [
            38652,
            "https://www.apple.com/appleca/0"
          ],
          [
            38701,
            "Reliance on this certificate by any party assumes acceptance of the then applicable standard terms and conditions of use, certif"
          ],
          [
            39256,
            "*Apple Code Signing Certification Authority"
          ],
          [
            39518,
            "\u003c?xml version=\"1.0\" encoding=\"UTF-8\"?\u003e"
          ],
          [
            39557,
            "\u003c!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\"\u003e"
          ],
          [
            39660,
            "\u003cplist version=\"1.0\"\u003e"
          ],
          [
            39682,
            "\u003cdict\u003e"
          ],
          [
            39689,
            "\u003ckey\u003ecdhashes\u003c/key\u003e"
          ],
          [
            39710,
            "\u003carray\u003e"
          ],
          [
            39719,
            "\u003cdata\u003e"
          ],
          [
            39728,
            "dB9bm8eClvIhBY3EiysWVMVyJfk="
          ],
          [
            39759,
            "\u003c/data\u003e"
          ],
          [
            39769,
            "\u003c/array\u003e"
          ],
          [
            39779,
            "\u003c/dict\u003e"
          ],
          [
            39787,
            "\u003c/plist\u003e"
          ],
          [
            65720,
            "__auth_stubs"
          ],
          [
            65968,
            "__DATA_CONST"
          ],
          [
            66032,
            "__auth_got"
          ],
          [
            121792,
            "S3GkcTQxd0wD0ZyBMy95Wap0f8s="
          ]
        ],
        "sz": 70176,
        "ts": [
          {
            "c": 1.0,
            "d": "Mach-O UUID present",
            "e": [
              "cd19d0d7e7bf35edb3a7b6c9e8c54636"
            ],
            "i": "metadata/build/reproducible::macho-uuid",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Mach-O linked dylib",
            "e": [
              "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation",
              "/usr/lib/libcrypto.46.dylib",
              "/usr/lib/libssl.48.dylib",
              "/usr/lib/libSystem.B.dylib"
            ],
            "i": "metadata/binary/linking::macho-dylib",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "macOS Platform Binary",
            "e": [
              "platform::Apple Root CA"
            ],
            "i": "metadata/signed/platform::apple",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Identifier",
            "e": [
              "e.mod_socache_memcache"
            ],
            "i": "metadata/signed/id::e.mod_socache_memcache",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "Mach-O uses .so extension",
            "e": [
              "mod_socache_memcache.so"
            ],
            "i": "metadata/file/extension::macho-so-extension",
            "l": 3
          },
          {
            "c": 1.0,
            "d": "Binary has 3+ functions",
            "e": [
              "binary.function_count = 38.00"
            ],
            "i": "metadata/binary/metrics::few-functions-3",
            "l": 1
          },
          {
            "c": 0.6000000238418579,
            "d": "/Library/Caches directory reference",
            "e": [
              "…sEtfDb569NpfrRSCNsL0UIVc/Library/Caches/com.apple.xbs/TemporaryD…"
            ],
            "i": "micro-behaviors/fs/path/library::library-caches-path",
            "l": 2
          },
          {
            "c": 0.8500000238418579,
            "d": "FORTIFY_SOURCE memcpy bounds check",
            "e": [
              "memcpy_chk",
              "memcpy_chk",
              "sym.imp.__memcpy_chk"
            ],
            "i": "metadata/hardening::memcpy-chk",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many functions (\u003e30)",
            "e": [
              "binary.function_count = 38.00"
            ],
            "i": "metadata/binary/metrics::many-functions",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "ARM64 Mach-O binary",
            "e": [
              "macho.cpu_type = 16777228.00"
            ],
            "i": "metadata/arch::arm64-macho",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 25+ imports",
            "e": [
              "binary.import_count = 25.00"
            ],
            "i": "metadata/binary/metrics::many-imports-25",
            "l": 1
          },
          {
            "c": 0.30000001192092896,
            "d": "libssl library reference",
            "e": [
              "/usr/lib/libssl.48.dylib"
            ],
            "i": "micro-behaviors/dylib/library/ssl::libssl-ref",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Binary has 20+ imports",
            "e": [
              "binary.import_count = 25.00"
            ],
            "i": "metadata/binary/metrics::many-imports-20",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average complexity",
            "e": [
              "binary.avg_complexity = 2.34"
            ],
            "i": "metadata/binary/metrics::avg-complexity-15-max",
            "l": 2
          },
          {
            "c": 0.8999999761581421,
            "d": "__stack_chk_fail function",
            "e": [
              "stack_chk_fail",
              "stack_chk_fail",
              "sym.imp.__stack_chk_fail"
            ],
            "i": "metadata/hardening::stack-chk-fail",
            "l": 2
          },
          {
            "d": "certificate string reference",
            "e": [
              "certificate",
              "certificate"
            ],
            "i": "micro-behaviors/crypto/certificate/operations::certificate-ref",
            "l": 2
          },
          {
            "c": 0.30000001192092896,
            "d": "libcrypto library reference",
            "e": [
              "/usr/lib/libcrypto.46.dylib"
            ],
            "i": "micro-behaviors/dylib/library/ssl::libcrypto-ref",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Universal Mach-O with two slices",
            "e": [
              "macho.slice_count = 2.00"
            ],
            "i": "metadata/binary/framework::dual-arch-macho",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "File is a compiled binary",
            "e": [
              "binary.file_size = 70176.00"
            ],
            "i": "metadata/binary/framework::is-binary",
            "l": 1
          },
          {
            "c": 0.8999999761581421,
            "d": "Binary has low overall entropy",
            "e": [
              "binary.overall_entropy = 3.06"
            ],
            "i": "metadata/binary/metrics::low-overall-entropy-binary",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Binary has low average string entropy",
            "e": [
              "binary.avg_string_entropy = 3.37"
            ],
            "i": "metadata/binary/metrics::avg-string-entropy-4-max",
            "l": 2
          },
          {
            "c": 0.800000011920929,
            "d": "Binary has many sentence-like strings",
            "e": [
              "binary.sentence_string_ratio = 0.24"
            ],
            "i": "metadata/binary/metrics::rich-sentence-strings-20pct",
            "l": 1
          },
          {
            "c": 0.20000000298023224,
            "d": "crypto keyword (substr, catches imports)",
            "e": [
              "/usr/lib/libcrypto.46.dylib"
            ],
            "i": "micro-behaviors/data/text/keywords::crypto-substr",
            "l": 1
          },
          {
            "c": 1.0,
            "d": "Mach-O linked dylib metadata",
            "e": [
              "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation",
              "/usr/lib/libcrypto.46.dylib",
              "/usr/lib/libssl.48.dylib",
              "/usr/lib/libSystem.B.dylib"
            ],
            "i": "metadata/binary/linking/runtime::dylib",
            "l": 2
          },
          {
            "c": 1.0,
            "d": "Apple platform binary",
            "e": [
              "platform::Apple Root CA"
            ],
            "i": "metadata/signed/trust-level::platform",
            "l": 2
          },
          {
            "c": 0.75,
            "d": "Low average code complexity",
            "e": [
              "binary.avg_complexity = 2.34"
            ],
            "i": "metadata/binary/metrics::low-average-complexity",
            "l": 2
          },
          {
            "c": 0.949999988079071,
            "d": "links self (stack_chk_guard, dyld_stub_binder, memcpy_chk, stack_chk_fail, ap_bin2hex, ... +22 more)",
            "e": [
              "self"
            ],
            "i": "metadata/dylib::self",
            "l": 2
          }
        ],
        "sha": "ee92cd94e189500dbb9d54f488a119b322ef7e992b62328e7a6007b41b9161f1",
        "path": "/data/samples/good/macOS_Tahoe-26.3/usr/libexec/apache2/mod_socache_memcache.so",
        "type": "macho"
      }
    ],
    "tv": "f6eaa"
  }
}