Check reputation without losing context

BeforeStep 1 is done: the SHA-256 hash is in the note.

Actions

• Search your own notes firstYou may have seen these exact bytes before. Your own context is the most specific source.
• Look up the hash, not the fileSearch by hash. Do not upload the file, because an upload can reveal it to others.
• Record each result with source and dateOne line per source. Do not merge results into one opinion.

Reading the result

An unknown hash means the source has no record of these bytes. It does not mean the file is safe.

Why this step matters

A lookup is cheap and fast, so it is tempting to let it decide. Its answer covers only these exact bytes, on this date, at this source. Writing that down keeps the result in proportion.