InstallShield Script
application/octet-stream
Magic Bytes
Offset: 0
BE 00 00 00 AB 00 00 00 00 00 00 00 00
InstallShield Script is a source code format developed by InstallShield, now part of Revenera, for creating customized Windows software installers. These files contain the underlying logic and instructions required to automate software deployment, including file transfer, registry modification, and system configuration rules. Although typically compiled into binary formats before distribution, the raw script files are text-based and considered safe, serving primarily as development assets rather than executable binaries.
Validation Code
How to validate .ins files in Python
Python
def is_ins(file_path: str) -> bool:
"""Check if file is a valid INS by magic bytes."""
signature = bytes([0xBE, 0x00, 0x00, 0x00, 0xAB, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00])
with open(file_path, "rb") as f:
return f.read(13) == signatureHow to validate .ins files in Node.js
Node.js
function isINS(buffer: Buffer): boolean {
const signature = Buffer.from([0xBE, 0x00, 0x00, 0x00, 0xAB, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00]);
return buffer.subarray(0, 13).equals(signature);
}
Go
func IsINS(data []byte) bool {
signature := []byte{0xBE, 0x00, 0x00, 0x00, 0xAB, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}
if len(data) < 13 {
return false
}
return bytes.Equal(data[:13], signature)
}API Endpoint
GET
/api/v1/ins
curl https://filesignature.org/api/v1/ins