Embodiments of the present disclosure provide method, device and computer program product for file search. The method for file search comprises: determining a hash value associated with an identification of a file to be searched; determining, from a plurality of candidate location chains, a target location chain associated with the hash value; determining, from the target location chain, a target element based on the identification, the target element indicating an address of the file to be searched in a memory; and acquiring the file from the memory based on the address.