Yes they seem to swap links sometimes, and they even swap them back ... Not sure that it is the cause here, but it is possible..
Yup. I've seen it happen before. I usually try to look under the behavioral information to make sure it's not creating any suspicious files. When I find any red flags, i'll let everyone know