Dont download this, Whatsoever

[trillwin]

VirusTotal detected the installer as malware, i know its true and you better uninstall it, well... idk if it is, i woudnt even download it, can you explain this malware nonsense and fix it so that i can make operating systems plzzz

[ADev531]

some antivirus detects wrongly sometime. if you still think it's a malware/virus, then check the code yourself

[LoxyMono]

False positives are common with executables distributed on the internet. Are you installing the userkit, or building and installing the devkit?

[AzureianGH]

Idiot

[trillwin]

there are lots of things i have to say

@AzureianGH
Don't say that.

@ADev531
I love your clippy profile pic, when i hear "Check the code yourself" i always think that its safe, but virustotal will still warn me with AiTrojanDetect

@LoxyMono
What's the difference between UserKit nad DevKit

[Szymekk44]

i am using it since 2022 and now my computer is flying

• dont trust ai
• cosmos is open source = all code is public
• usekit is an older build of devkit
• devkit is just 'github repo' (Download as zip to get it)
  Cosmos is safe, don't worry.

[ADev531]

plus, cosmos was in microsoft documentation, i don't know is it still there or not though.
why microsoft would put malware into their documentation, if it was a malware?

[moxie-coder]

literally one stupid false flag from an AI, why would you believe an false flag from an AI when AI has its flaws, this thing is open source and you can look through it yourself, plus this is meant for Visual Studio which you do the coding for most of the OS yourself

[zarlo]

if you dont trust the pre-built installer build it yourself

[moxie-coder]

if you dont trust the pre-built installer build it yourself

pretty much the gist of it

[ascpixi]

If you believe that the public build of the user-kit contains malware, you're welcome to inspect it with static (Ghidra, IDA, Binary Ninja...) or dynamic (ANY.RUN, Triage...) analysis and report back if you find anything. Please note that anti-malware products commonly have false positives, especially with machine learning-based heuristics (which you reported was the detection).

[valentinbreiz]

if you dont trust the pre-built installer build it yourself

Building a new userkit is at this state building a devkit so I encourage you using the devkit @trillwin.
Please see https://cosmosos.github.io/articles/Installation/DevKit.html

[trillwin]

should i download it now?

• COSMOS C# isnt anywhere in visual studio's extensions
• What does "build it yourself" mean
• My parents woudnt even let me download it, even if we explained all this nonsense happening

[ascpixi]

Cosmos isn't just a VS extension - while it does feature a VS extension to make development easier, you can just as well use it from, say, VS Code. By "build it yourself", we mean cloning the repo, and running install-VS2022.bat (given you're running Visual Studio) to create a fresh build from the source code. You can verify all of the build scripts and the source code itself if you're still unsure about the legitimacy of this project.

FYI - only two anti-malware engines detected anything inside the devkit. That is, 2 out of 72. Bkav Pro detected it as "W32.AIDetectMalware", which suggests that this isn't concrete detection, but instead, an AI guessing that the executable is malware (it isn't). SecureAge marks it as "Malicious", but fails to provide any kind of identifier.

For your convenience, I've ran an ANY.RUN dynamic analysis of the user-kit. Why the simple action of running an Inno Setup installer is marked as "malicious" by it is beyond me (bit trigger happy?), but I doubt you'll be able to find anything malicious that the installer does. You're welcome to comb through the logs and process tree.

While the User Kit is completely safe, you're still recommended to build Cosmos from scratch, as the pre-build releases are severly out-of-date.

[trillwin]

wait, huh, how do i install the real one, not the source code