Emsisoft Decryptor for Maze / Sekhmet / Egregor

The Maze ransomware group was the first to introduce a double-extortion model back in 2019, a tactics that was also borrowed by Egregor and Sekhmet in 2020. Their strategy is to first exfiltrate the data on the target computer, threatening to publish the stolen files unless a ransom is paid. Maze and Egregor claimed important company names as their victims, such as LG, Canon, Ubisoft, Barnes & Noble, and more.

The ransomware group’s activity shut down in February, 2022, as someone claiming to be the author of all three ransomware released the decryption keys to the public. Evidently, if you are a victim of any of the three operations, then you could use the leaked decryption keys to unlock your files. Nevertheless, it is much safer to let security companies check out the authenticity of the keys first.

As it usually happens, a dedicated decryptor is released to the public, one that can decrypt a victim's files. Emsisoft is one of the companies that does this on a regular basis and no exception was made this time. In other words, victims of the aforementioned ransomware can use the Emsisoft Decryptor for Maze / Sekhmet / Egregor to get their data back.

The Emsisoft Decryptor for Maze / Sekhmet / Egregor runs a bruteforce attack to decrypt locked files, but an original ransom note for Maze, Sekhmet or Egregor is needed to begin. You can also select the number of threads to use in the decryption process.

The decryptor tries to reconstruct the encryption details and get the correct decryption key. Then, you simply have to select the location of the encrypted files to begin. All the connected local and network drives are displayed in the list, but you can also add other folders manually.

Please note that the decryptor does not save information about the encrypted files and that is why it is recommended to preserve the encrypted files, as suggested in the “Options” tab.

The Emsisoft Decryptor for Maze / Sekhmet / Egregor is the safest way to go if you discover that you are a victim of the Maze, Sekhmet or Egregor ransomware families. It is easy to use and, with a few clicks, you can have all your data back.