StatusWe're opening the source
NotaryPrivate.exe from suite 1.2.0 as Trojan:Win32/Bearfoos.A!ml. The !ml ending means a machine-learning rule made the call, not a match against known malware.We believe it is a false positive, and we think we know what set it off: the Keeper, described below, keeps a copy of the suite's own program files and puts them back when they go missing. Some malware does the same thing to survive being removed.
Asking you to take our word for it isn't good enough, so the whole suite is now open source under the GNU GPL, version 3. Read every line at gitlab.com/rob.delateja/notaryprivate, build it yourself, and see exactly what the Keeper does in notaryprivate/keeper.cpp. If you find something wrong, tell us.
Downloads are closed for now. The installer stays off this site until it is code signed and Microsoft has reviewed the file. Every build we have published is listed under Verify a file, so you can check anything you were given.
The appsWhat the suite installs
NotaryPrivate1.4.2Word processor for Word, OpenDocument, RTF, PDF and text files. Every document keeps branches of itself, and you can push text to an AI assistant, which never presses Send for you.
Nodery0.2A color-coded editor for Markdown and for the Mas+ and DRILL formats, with a console for DRILL files.
Pilla0.2A light spreadsheet with two modes: Planilla, where you type and nothing recalculates, and Parilla, where everything does. Opens and saves Excel, OpenDocument, CSV and more.
Presenta0.2.1Slides with layers, filters and plug-ins, plus a photo viewer and editor.
Glifo0.1.2A glyph tool: a symbol clipboard, a text injector and an exporter.- One user, no admin rights. Everything goes in your own
AppData\Local\Programsfolder. - CPU only. No app is pinned to a graphics card, and we measured 0 MB of GPU memory in use for each one.
- Uninstall cleanly. Settings > Apps removes the programs and their registration and leaves your documents alone.
The KeeperThe part that looks unusual, in plain words
When NotaryPrivate opens for the first time after Windows restarts, the Keeper runs once in the background:
- It checks that NotaryPrivate and Nodery are still installed and findable in Start and Search, and puts back program files that went missing, from its own copy of them.
- It checks the libraries the apps bundle against OSV.dev, a public vulnerability database. It sends package names and version numbers only, nothing from your documents.
It never starts with Windows, never asks for admin rights, and never changes security settings. It is a named checkbox in setup, it introduces itself the first time NotaryPrivate opens, and File > NotaryPrivate Keeper shows what it did and turns it off.
Verify a fileCheck any build before you run it
- Compare its fingerprint. In PowerShell, in the folder that holds the file:
Get-FileHash .\NotaryPrivate-Setup-1.2.2.exe -Algorithm SHA256
The result has to match the table below letter for letter. If it doesn't, don't run the file, and tell us where you got it. - Check the signature.
Get-AuthenticodeSignature .\NotaryPrivate-Setup-1.2.2.exe
Today's builds sayNotSigned: they aren't code signed yet. When they are, the signer and the certificate's thumbprint will be listed here, and the status has to readValid. - Build it yourself. The source builds with one script,
./build-all.sh, on Linux or WSL with MinGW-w64, NSIS, Python and Zig. The README lists the packages. The builds aren't byte-for-byte reproducible yet, so your own build's fingerprints won't match the table; the code is what you compare. - Get a second opinion. Each fingerprint below links to its page on VirusTotal, which runs the file past about 70 antivirus engines. If the page says it has never seen the file, you can upload it there yourself.
Suite 1.2.2 2026-10-27 not signed yet
| File | Size | SHA-256 (opens VirusTotal) |
|---|---|---|
| NotaryPrivate-Setup-1.2.2.exe | 1,951,347 bytes | a62931570c38265024626cb6ce18aea616d576a404034b05e5910fe8a583cdc0 |
| NotaryPrivate.exe | 2,083,328 bytes | 4fc74456e373bf5e84218d3ae7079c37405e28d22a20b4760959b64cc21598c3 |
| Nodery.exe | 1,169,408 bytes | 838ea57f194e9575bb072a7ed6f4b87fbb53c12aaa90d44d25922b9df1dcdc02 |
| Pilla.exe | 1,492,992 bytes | eb9d9b9894a56c4102dbe2f82534eae2c0d649e0f9c90612af51fdd77f6e7a8c |
| Presenta.exe | 1,111,040 bytes | 1beb0760db3ba05ce128c44b82e8faed0e0060d96e099b357fa9243dfc7ddb93 |
| Glifo.exe | 841,216 bytes | 13b893e83be8831c93c8bda6334c642113ef67e8257a0fd9f98a898dcc77ad8e |
Suite 1.2.1 2026-10-27 not signed yet
| File | Size | SHA-256 (opens VirusTotal) |
|---|---|---|
| NotaryPrivate-Setup-1.2.1.exe | 1,939,505 bytes | d79fa51096e265c1588a47b3007ef61ec007f29c334195be3b589da69d2193b1 |
| NotaryPrivate.exe | 2,082,816 bytes | e6a75137868f6b52e1307bb37123dbaaab3fd96d3ae893bc240cc578b1c7666c |
| Nodery.exe | 1,169,408 bytes | c8e6d1206a94b605ed8ba1ce961460849abb5da15af14db525565ba2fb08260a |
| Pilla.exe | 1,492,992 bytes | 88af3c0548600f7d083852d83d7015e196c6fbef33e5fad20ef026dae0285aab |
| Presenta.exe | 1,111,040 bytes | f9bcbba52735fa3b92f8e1f51c843e1bab6d43a44d6e2ac7a6b496cb13485623 |
| Glifo.exe | 841,216 bytes | 7409a7b70753f1d5e15af95616c45a1a997f68a3ed16bfe87a381a6db5162847 |
Suite 1.2.0 2026-10-27 not signed yet
Microsoft Defender flagged this NotaryPrivate.exe as Trojan:Win32/Bearfoos.A!ml. Replaced by 1.2.1.
| File | Size | SHA-256 (opens VirusTotal) |
|---|---|---|
| NotaryPrivate-Setup-1.2.0.exe | 1,936,200 bytes | 52c6150a0ae5b393d9fba4da97f9b19d4b76d7781425166b083522d3e54bdfe1 |
| NotaryPrivate.exe | 2,081,792 bytes | d18a253b7e164ca4a67b9ee3855e2cce802295ccfb5fbf17a63eb3661b158090 |
ReportMalware alerts, bugs and feedback
If your antivirus flags a NotaryPrivate file, the name it used and the file's SHA-256 help most. Anything else about the apps is welcome too.
PrivacyWhat this site keeps
- A report keeps the fields you fill in and the time you sent it. Your email is kept only if you give it, and only to answer you.
- To stop floods, each report also keeps a fingerprint made from your network address and the date. It changes every day, and the address itself is never stored.
- Nothing else. No cookies, no analytics, no ads, and no scripts from anyone else. Reports stay in our own database and aren't shared or sold.
AboutWho makes it
NotaryPrivate is made by Rob de la Teja in New York, and it's free.
Copyright © 2026 Pigpen Brands LLC. The suite is free software under the GNU General Public License, version 3: use it, study it, change it and share it. The source is at gitlab.com/rob.delateja/notaryprivate.