{"success":true,"data":{"ext":"dll","name":"Windows/DOS executable file","description":"The Dynamic Link Library (DLL) format is a Microsoft Windows component file format used by the Windows operating system and maintained as part of the Windows platform. DLL files provide shared functions, resources, and code modules that can be loaded by applications and system services at run time. Because DLLs can execute code within a process, they are commonly associated with software loading, compatibility issues, and malware abuse; unsigned or unexpected files should be treated cautiously.","mime":["application/x-msdownload"],"risk_level":"High","signatures":[{"hex":"4D 5A","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"},{"name":"Wikipedia","url":"https://en.wikipedia.org/wiki/List_of_file_signatures"},{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":["com","exe","sys","a","bin","elf"],"usage":{"python":"def is_dll(file_path: str) -> bool:\n    \"\"\"Check if file is a valid DLL by magic bytes.\"\"\"\n    signature = bytes([0x4D, 0x5A])\n    with open(file_path, \"rb\") as f:\n        return f.read(2) == signature","node":"function isDLL(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x4D, 0x5A]);\n  return buffer.subarray(0, 2).equals(signature);\n}","go":"func IsDLL(data []byte) bool {\n    signature := []byte{0x4D, 0x5A}\n    if len(data) < 2 {\n        return false\n    }\n    return bytes.Equal(data[:2], signature)\n}"},"category":"Executables"}}