1. A computer-implemented method, comprising: accessing, by an analysis console, information related to a first file received at a first host of a plurality of hosts, each host running a corresponding set of malware detection processes, the information comprising: an identifier of the first file, the identifier generated by the first host, the identifier usable by each of the plurality of hosts to determine whether a second file comprises content substantially equivalent to content of the first file; and data indicating a first result of the first host applying the set of malware detection processes to the first file; generating, by the analysis console, a first output comprising: the identifier of the first file; a second result indicating whether the first file comprises malware, the second result usable by each of the plurality of hosts to determine whether the second file comprises malware based on a determination that the second file comprises content substantially equivalent to content of the first file; and propagating the first output to the plurality of hosts.