New
#1
The author got a little overexcited. For starters it is PUP, secondly, it merely opened a link, the browser downloaded it, so no sandbox was breached. I guess, that the proclaimed update downloaded some script, which caused a link to open.