It's the first one only, compiled by ExeScript (from Everstrike Software) and compressed with UPX that triggers the AVG alert (even if uncompressed with UPX), the second being in readable source form. By the way, thank you very much for this much-needed .Net packager