Get Help on Bit9 FileAdvisor

What Is FileAdvisor?

FileAdvisor™ is a free service provided by Bit9, Inc. that enables you to identify unknown files quickly by searching an index of known applications and malware. Enter an MD-5 hash, SHA-1 hash, or file name, and FileAdvisor returns information about the origin and trustworthiness of the file. It's that simple.

Download the Free FileAdvisor Utility

The FileAdvisor client utility is a lightweight (164 kb) shell extension to Windows File Explorer that enables you to right-click on any file on your computer and, with a single request, hash the file and submit it for analysis. You can select and submit up to four files at a time. The program installs in seconds in your default Program Files directory and works immediately, without restarting your computer. To view FileAdvisor results, you will need to register with Bit9 by providing at least the following information:

  • E-mail address
  • User name
  • Password

Bit9 is committed to the privacy of your information. Download FileAdvisor.

Identify Files by Name

  1. Enter the name of the file in the search box.
  2. Click the Search button.

 Because files with the same name can have different contents, file-name searches cannot provide positive identification. To positively identify a file, search its hash. Hashes are cryptographic signatures that uniquely identify a file. To create your own hashes, you can download the free Bit9 FileAdvisor utility for Windows (recommended) or use any of the hash-creation utilities available on the Web.

Identify Hashes

  1. Enter an MD-5 or SHA-1 hash of any file in the search box.
  2. Click the Search button.

Browse by Category

When possible, FileAdvisor groups files into the following cross-referenced categories:

File Category Description
Package Group of associated files in which the file appeared. Depending on the file, packages can be nested in other packages or have parent packages. When possible, FileAdvisor displays this hierarchy as a tree. Files can appear in multiple packages.
Publisher Publisher of the file as identified by digital certificate (if the file is signed).
Source Name of the source where FileAdvisor discovered the file, which is not necessarily the publisher. To help you discern the nature and trustworthiness of the source, FileAdvisor further categorizes according to type (Internet, commercial software vendor, third-party provider, subscription, and open source project).

List Files by Discovery Source and Publisher

From the navigation bar at the top of the Help page, choose one of the following:

  • Browse > By Publisher to display a list of indexed publishers
  • Browse > By Source to display a list sources that FileAdvisor used to compile its files

Depending on the information displayed, optionally link to products, packages, or component hashes.

About Bit9

Bit9 develops software solutions that help enterprises end the problem of unwanted software on their desktops, servers, and laptops:

  • Bit9 Security Platform

    Get the visibility, detection, protection and incident response capabilities you need to defend your organization against advanced threats and malware.
  • Bit9 Cloud Services

    A comprehensive cloud-based service that drive the Bit9 Security Platform’s trust, detection, protection engine. Bit9 Cloud Services is comprised of the Bit9 Software Reputation Service and the Bit9 Advanced Threat Indicator Service.

Learn more about Bit9 Trust-based Security Platform..