1. A non-transitory computer-readable medium storing instructions, the instructions comprising: one or more instructions that, when executed by one or more processors, cause the one or more processors to: analyze a first file for malware; determine that the first file causes a second file to be downloaded, the second file being different from the first file; store linkage information that identifies a relationship between the first file and the second file based on determining that the first file causes the second file to be downloaded; analyze the second file for malware; determine a malware base score based on analyzing the first file for malware; determine a malware feedback score based on analyzing the second file for malware and based on the linkage information; determine a first malware score for the first file based on the malware base score and malware feedback score; and determine a second malware score for the second file based on analyzing the first file for malware and based on the linkage information.