.WRUI File Extension

WRUI Ransomware Encrypted File

Developer N/A
3.0  |  1 Vote

What is a WRUI file?

A WRUI file is a file that has been encrypted by WRUI ransomware, which is malware distributed by cybercriminals. It contains a file, such as an .MP4, .JPG, or .DOCX file, that the virus has renamed and encrypted. WRUI files cannot be opened, and they cannot be decrypted.

More Information

In April 2021, some PC users began reporting that their computers had been infected by ransomware that came packaged within the B6F6.exe and MicrosoftToolkit.exe executables. The executables contained several viruses, one of which encrypted many of the users' files and renamed the files to use the .wrui extension.

WRUI ransomware is a variant of STOP ransomware, which is one of the most common types of ransomware. Other variants of STOP ransomware append users' files with the .STOP, .DJVU, .rumba, .gero, or .CADQ extensions. All variants of STOP ransomware produce ransom messages named _readme.txt in affected folders, which contain instructions a user is meant to follow to decrypt their files.

How to open a WRUI file

WRUI files are encrypted, so you cannot open them. In some cases, you may be able to revert a WRUI file to its original form by renaming it to use its previous extension. For example, you can rename an encrypted JPG from yourjpg.wrui to yourjpg.jpg and attempt to open it. This may allow you to open some of your renamed files but likely will not work on all your files.

While Emsisoft offers a Decryptor for STOP ransomware, it works only for STOP variants that use offline decryption keys. The WRUI variant uses online decryption keys, so Emsisoft's decryptor cannot decrypt WRUI files.


FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.

Open over 400 file formats with File Viewer Plus.Free Download

Programs that open WRUI files

No programs available

Verified by FileInfo.com

The FileInfo.com team has independently researched the WRUI Ransomware Encrypted file format and apps listed on this page. Our goal is 100% accuracy and we only publish information about file types that we have verified.

If you would like to suggest any additions or updates to this page, please let us know.