{"success":true,"data":{"ext":"hdmp","name":"Windows heap dump file","description":"Windows heap dump (HDMP) is a diagnostic file format used by Microsoft Windows and associated debugging tools to capture the contents of a process heap during a crash or troubleshooting session. It is used by developers and support engineers to analyze memory corruption, application failures, and other runtime issues with debuggers and crash-analysis utilities. The format is primarily legacy and may contain sensitive memory data, so files from untrusted systems should be handled carefully.","mime":[],"risk_level":"Safe","signatures":[{"hex":"4D 44 4D 50 93 A7","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":[],"usage":{"python":"def is_hdmp(file_path: str) -> bool:\n    \"\"\"Check if file is a valid HDMP by magic bytes.\"\"\"\n    signature = bytes([0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7])\n    with open(file_path, \"rb\") as f:\n        return f.read(6) == signature","node":"function isHDMP(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7]);\n  return buffer.subarray(0, 6).equals(signature);\n}","go":"func IsHDMP(data []byte) bool {\n    signature := []byte{0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7}\n    if len(data) < 6 {\n        return false\n    }\n    return bytes.Equal(data[:6], signature)\n}"}}}