Automatically flag malicious files with metadata