VirusTotal https://www.virustotal.com/en/file/784ccbf90447da450191b6d47c102ab794e540a313569e4fff1021302969b0e6/analysis/1398116492/
the first red link from Zulu https://www.virustotal.com/en/file/137d7f3878caea39f25265d0eeeee79b0898eda0c1f7548e8d8e990aed5ce1b1/analysis/1398116672/
second https://www.virustotal.com/en/file/301e97d8ffa4891c70c9958a9f294ad708f1b0fc479f02ad80657acdbe824a84/analysis/1398116796/