Igor’s Tip of the Week #174: IDA database (IDB)details

When you work in IDA, it saves the results of your analysis in the IDA Database, so that you can pause and continue at a later time. You can recognize the database files by their file extension .idb (for legacy, 32-bit IDA) or .i64 (for 64-bit IDA or IDA64). Thus they’re also often called just IDB. But what do they contain?

You can get a hint by looking at the working directory when the IDB is open in …

64-bit analysis can continue database extension file files ida legacy malware analysis results week work