.. /.Pyw

Executable
Script

Contributors:

mr.d0x

Description:

PYW are GUI Python script files. They must be run by pythonw. By default Python is not installed on Windows. Usually, once Python is installed, .pyw files are executed via the Pythonw interpreter upon being double clicked.

OS:

Windows
Mac
Linux

Recommendation:

Block the execution of PYW files. Whitelist users/groups when required.

Resources:

https://www.cyborgsecurity.com/cyborg_labs/python-malware-on-the-rise/

File Samples: