1. A method, comprising: receiving a target file; dividing the target file into a plurality of byte windows; for each byte window from the plurality of byte windows, determining (1) how often a byte value in that byte window is within a byte value range and (2) whether an informational entropy for that byte window is within an informational entropy range; calculating a probability that the target file is malicious based on the determining; communicating a threat score based on the probability, the threat score corresponding to an indication of a potential threat to a user, device, or network; and performing a remedial action based on the threat score.