drop memory dump pe or hex paste · windowed shannon entropy · high-entropy and shellcode candidate regions · pe section entropy · export csv · runs locally
input
drop memory dump or pe
or click
256-byte window · 64-byte step · first 32 MB analyzed
drop memory dump · pe · or paste hex