I also tested your first program with CG7 on VirusTotal, which had passed cleanly:
Here
You must be registered to see the links
and also this new program in this post:
You must be registered to see the links
By the way, I congratulate you for having managed to reduce the detections to just 4 (which must certainly be false positives related to the obfuscator), because there is nothing, nothing that justifies those 20 alerts in the VT with that program for the Brazilian group of F95. Furthermore, you don't need to be a computer/IT expert to be able to use Virus Total, because it is a public website made precisely for anyone to use and check whether any program or website could be risky to use or not (either which even this forum uses his API if I'm not mistaken).
And the reason I also tested Unren, a simple "command line", is precisely to show that I wasn't being biased or that I had done some photomontage just to attack, especially because you, knowing so much about computing, should know that many malware and ransomware attacks are carried out through... command lines :v , and depending on what was in Unren's commands, it could happen that some of the site's antiviruses detect something or not.