Jigsaw ransomware-affected file
File type: Ransomware encrypted file
A .hush file is usually a user file encrypted and renamed by a variant of the Jigsaw ransomware.
The extension is a marker added by the malware, not a normal file format used by an ordinary application.
File type category:
Ransomware encrypted file
Date updated: October 12, 2026
The .hush extension was reported as newly used by a Jigsaw ransomware variant encountered in January 2017. Jigsaw is Windows malware that encrypts files and changes their names, including by adding the .hush suffix.
The affected file still contains encrypted data from the original user file, but its contents cannot normally be read by the application that created it. The extension is therefore part of the ransomware's file-renaming scheme rather than a separate document or media format.
Jigsaw has appeared in multiple variants, and support for the .hush variant may differ from support for other variants.
A .hush file cannot normally be opened with the application that created the original file. It must first be restored with a Jigsaw-specific decryption tool that supports this variant, if one is available.
Do not rely on simply removing the suffix: renaming the file does not decrypt its contents.
There is no meaningful direct conversion from the .hush file itself. The file must first be successfully decrypted or recovered; the resulting original file can then be opened or converted with its normal application.
Language