GlobeImposter decryptor
Published: 2016-12-23 · Archived: 2026-04-05 17:02:07 UTC
Please note that these free tools are provided as-is and without warranty of any kind. The tools may only work
with specific ransomware versions, and may not work with versions that were released after a tool was created.
Technical support for the tools is available only to customers using a paid Emsisoft product.
GlobeImposter is a Globe copycat that imitates the ransom notes and file extension found in the Globe
ransomware kit. Encrypted files have the extension *.crypt and the base name of the file is unchanged. The
ransom note is named "HOW_OPEN_FILES.hta" and can be found in all folders that contain encrypted files.
To start the decryption process you will need a file pair consisting of an encrypted file and the non-encrypted
version of the same file. Select both and drag and drop them onto the decrypter binary to start the process.
Source: https://www.emsisoft.com/ransomware-decryption-tools/globeimposter
https://www.emsisoft.com/ransomware-decryption-tools/globeimposter
Page 1 of 1