InnoSetup Format

InnoSetup is a free, script-driven installation system for Windows, developed by Jordan Russell in 1997. It uses a Pascal-based scripting language, allowing for complex and customizable installers. Key features include graphical interfaces, file and registry operations, multilingual support, and the creation of encrypted and compressed executables.

Our support encompasses all released versions of InnoSetup. We provide support for encrypted setups, file extraction, thorough inspection of all parts of the format, and PascalScript disassembly.

The inspection of the format’s inner details not only enables you to understand all the actions performed by the installer but also reveals forensic artifacts, such as timestamps.

The inspection of the format covers the resources of the setup wizard itself.

When a setup uses encryption, automatic decryption is attempted. For example, the malicious sample shown in the screenshot below was automatically decrypted.

If you want to inspect the custom RemObjects PascalScript bytecode, make sure to install the IFPS Format package as well.