You're linking against their C runtime (CRT) standard library, so it's not injecting per se. Standard C libraries often include all kinds of stuff in otherwise

You're linking against their C runtime (CRT) standard library, so it's not injecting per se. Standard C libraries often include all kinds of stuff in otherwise "empty" main(){} executables. That being said, I've never heard of a C runtime including telemetry by default, so malware wouldn't be a totally unfounded opinion.