A device, comprising: a memory; and one or more processors configured to: analyze a password-protected file to identify another file that was previously analyzed, the identification of the other file being based on a determination that a difference between metadata associated with the password-protected file and metadata associated with the other file satisfy a threshold; identify a set of contextual terms associated with the password-protected file based on determining that the difference satisfies the threshold, the set of contextual terms associated with the password-protected file being based on contextual terms included in a second password dictionary used for the other file; store the set of contextual terms in a password dictionary in the memory; prioritize the set of contextual terms in the password dictionary to form a set of prioritized terms such that the set of contextual terms in the password dictionary is given a higher priority than non-contextual terms stored in the password dictionary; apply a prioritized term, of the set of prioritized terms, as a password to attempt to access the password-protected file; determine whether the prioritized term was successfully applied as the password to access the password-protected file; update, based on determining that the prioritized term was successfully applied as the password, a priority of the prioritized term in the password dictionary, the password dictionary indicating an order in which the set of prioritized terms are to be applied to attempt to access a password-protected set of files; and analyze, when the password-protected file is protected by the prioritized term as the password, the password-protected file to determine whether the password-protected file contains malware. a memory; and one or more processors configured to: analyze a password-protected file to identify another file that was previously analyzed, the identification of the other file being based on a determination that a difference between metadata associated with the password-protected file and metadata associated with the other file satisfy a threshold; identify a set of contextual terms associated with the password-protected file based on determining that the difference satisfies the threshold, the set of contextual terms associated with the password-protected file being based on contextual terms included in a second password dictionary used for the other file; store the set of contextual terms in a password dictionary in the memory; prioritize the set of contextual terms in the password dictionary to form a set of prioritized terms such that the set of contextual terms in the password dictionary is given a higher priority than non-contextual terms stored in the password dictionary; apply a prioritized term, of the set of prioritized terms, as a password to attempt to access the password-protected file; determine whether the prioritized term was successfully applied as the password to access the password-protected file; update, based on determining that the prioritized term was successfully applied as the password, a priority of the prioritized term in the password dictionary, the password dictionary indicating an order in which the set of prioritized terms are to be applied to attempt to access a password-protected set of files; and analyze, when the password-protected file is protected by the prioritized term as the password, the password-protected file to determine whether the password-protected file contains malware. analyze a password-protected file to identify another file that was previously analyzed, the identification of the other file being based on a determination that a difference between metadata associated with the password-protected file and metadata associated with the other file satisfy a threshold; identify a set of contextual terms associated with the password-protected file based on determining that the difference satisfies the threshold, the set of contextual terms associated with the password-protected file being based on contextual terms included in a second password dictionary used for the other file; store the set of contextual terms in a password dictionary in the memory; prioritize the set of contextual terms in the password dictionary to form a set of prioritized terms such that the set of contextual terms in the password dictionary is given a higher priority than non-contextual terms stored in the password dictionary; apply a prioritized term, of the set of prioritized terms, as a password to attempt to access the password-protected file; determine whether the prioritized term was successfully applied as the password to access the password-protected file; update, based on determining that the prioritized term was successfully applied as the password, a priority of the prioritized term in the password dictionary, the password dictionary indicating an order in which the set of prioritized terms are to be applied to attempt to access a password-protected set of files; and analyze, when the password-protected file is protected by the prioritized term as the password, the password-protected file to determine whether the password-protected file contains malware.