Hacker News new | ask | show | jobs
by Tomdarkness 4818 days ago
From a quick glance it would appear it tries to execute:

C:\Users\<username>\AppData\Roaming\AdobeUpdate-Setup1.84.exe

Just appears to be a rudimentary attempt at obfuscating the executable path.

The question is, how come the JVM is allowing Runtime.getRuntime().exec() to be called.

2 comments

According to an up thread commenter, it's digitally signed which allows a prompt to the user for elevated permissions.
An evil wee signed applet.