Looking much better, would still advice caution as with any file downloaded from the internet.

Based on the latest wallet virustotal scans and behavior checks, no more commands are executed.
All the alerts reference either cryptowallets or cryptominers which for coin wallets is pretty normal.

Is it possible your build environment was compromised when building the previous wallets?