A GPU Miner Trojan is being installed along with the popular Andy Android Android emulator. This miner reportedly will use the graphics processing unit, or GPU, on the computer’s graphic’s card in order to mine cryptocurrency. VirusTotal detected the Andy installer as an adware bundler for its installer, which are known to sometimes perform sneaky installs of miners onto user’s computers without their knowledge or permission. The Miner would be installed as C:Program Files (x86)Updaterupdater.exe and when launched would use up the. computer’s graphics processor.
Source: https://www.bleepingcomputer.com/news/security/andy-os-android-emulator-reportedly-installing-a-gpu-miner/