What Is FileAdvisor?
FileAdvisor™ is a free service provided by Bit9, Inc. that enables you to identify unknown files
quickly by searching an index of known applications and malware. Enter
an MD-5 hash, SHA-1 hash, or file name, and FileAdvisor returns information about the origin and trustworthiness of the file.
It's that simple.
Download the Free FileAdvisor Utility
The FileAdvisor client utility is a lightweight (164 kb) shell extension to Windows File Explorer that
enables you to right-click on any file on your computer and, with a single request, hash the file and
submit it for analysis. You can select and submit up to four files at a time. The program installs in
seconds in your default Program Files directory and works immediately, without restarting your computer. To view
FileAdvisor results, you will need to register with Bit9 by providing at least the following information:
- E-mail address
- User name
Bit9 is committed to the privacy of your information. Download FileAdvisor.
Identify Files by Name
- Enter the name of the file in the search box.
- Click the Search button.
Because files with the same name can have different contents, file-name searches
cannot provide positive identification. To positively identify a file, search its hash. Hashes are cryptographic signatures
that uniquely identify a file. To create your own hashes, you can download the free Bit9 FileAdvisor utility for Windows (recommended)
or use any of the hash-creation utilities available on the Web.
- Enter an MD-5 or SHA-1 hash of any file in the search box.
- Click the Search button.
Browse by Category
When possible, FileAdvisor groups files into the following cross-referenced categories:
||Group of associated files in which the file appeared. Depending on the file, packages can be nested in other packages or have parent packages. When possible, FileAdvisor displays this hierarchy as a tree. Files can appear in multiple packages.
||Publisher of the file as identified by digital certificate (if the file is signed).
||Name of the source where FileAdvisor discovered the file, which is not necessarily the publisher. To help you discern the nature and trustworthiness of the source, FileAdvisor further categorizes according to type (Internet, commercial software vendor, third-party provider, subscription, and open source project).
List Files by Discovery Source and Publisher
From the navigation bar at the top of the Help page, choose one of the following:
- Browse > By Publisher to display a list of indexed publishers
- Browse > By Source to display a list sources that FileAdvisor used to compile its files
Depending on the information displayed, optionally link to products, packages, or component hashes.
Bit9 develops software solutions that help enterprises end the problem of unwanted software on their desktops, servers, and laptops:
Bit9 Security PlatformGet the visibility, detection, protection and incident response capabilities you need to defend your organization against advanced threats and malware.
Bit9 Cloud ServicesA comprehensive cloud-based service that drive the Bit9 Security Platform’s trust, detection, protection engine. Bit9 Cloud Services is comprised of the Bit9 Software Reputation Service and the Bit9 Advanced Threat Indicator Service.
Learn more about Bit9 Trust-based Security Platform..