The offending script was in System32 of all places, and was oddly named with a bunch of hexadecimal strings.

Task Manager's detail tabs lets you display a column which gives you the command line arguments for running a piece of software, including the exact path of the. I opened Task Manager, and lo and behold, PowerShell taking up four gigabytes of RAM and a whole lot of CPU. Unfortunately for the ill-intentioned developers, though, their process is a memory hog, so when playing a (PC) game that should not have been demanding at all along with a browser window opened, I noticed dips into very low framerates which my PC should have been to handle. Now I've seen that behavior intentionally before on machines that make use of group policies and stuff, so while it did raise an eyebrow, I assumed it was most likely one of my server-type software (something along the lines of Jellyfin, a Plex alternative) needing to open a silent PS shell to set some things up. I took notice a few days ago that my PC occasionally opened a window that closes instantly, with the distinct blue hue of PowerShell. I'd always joked that nearly every 'gaming' Android emulator that doesn't require a lot of setup was spyware at worst and merely riddled with ads and pops at best, but I never thought I'd see it firsthand.

Posting this here instead of the dedicated LDPlayer subreddit, because they have an official account moderating there, and I assume this would just get deleted.

For ipod instal LDPlayer 9.0.59.1