What is a .SDB file?
SDB is a Windows application-compatibility shim database.
- Did you know
- Shim databases let old programs keep working on newer Windows.
- Shim databases are applied with the built-in sdbinst.exe tool, which registers them so Windows can hook the target program.
- Because shims can inject DLLs and redirect calls, attackers have abused the .sdb mechanism for stealthy persistence.
- What Analyser reads
- Inspect OS and system files: OPML subscription lists, RSS/Atom feeds, Linux .desktop launchers and systemd .service units, Apple .crash reports, Android .ab backups, Windows Task Scheduler .job, Group Policy Registry.pol, and .scr screensaver PE headers, plus identification of .DS_Store, Thumbs.db, dSYM/DWARF and shim .sdb. Scene .nfo ASCII art now opens in a CP437 viewer - see Text art above.
- Depth of analysis
- .SDB is an identification-grade format: Analyser recognises it from its bytes and decodes the header metadata it carries, rather than opening it in a full viewer. Formats that do get a full viewer are marked "Full" on the formats page.
- Open a .SDB file
- Drag a .SDB file onto the Analyser home page (or tap to pick one). It is identified entirely in your browser - nothing is uploaded, there is no account, and it works offline once installed.