Vanilla Android emulator spams RTSP in Wireshark

I'm dealing with some pretty insidious hacks on both my phone and computer (Fedora 41). A lot of it has to do with Google, but more than that, I'm still a little lost. I plugged my compromised Android into my USB port and probably compromised my computer more than it already was. When setting up a simple blank activity in the emulator with Wireshark running, I'm seeing A BUNCH of RTSP packets signifying consistent streaming. I'm guessing it to be real-time sound data. The microphone icon is on on the toolbar of my desktop too. This doesn't seem correct to me, but as I don't have a known safe baseline to compare I can't determine "appropriate" behavior. Is this normal behavior?