It probably should only send to the telemetry endpoints when you try to run the command. Otherwise it doesn't seem nefarious if you have telemetry enabled on th

It probably should only send to the telemetry endpoints when you try to run the command. Otherwise it doesn't seem nefarious if you have telemetry enabled on the OS does it? Knowing the commands people often use the Run dialog for can be a useful input for making usability and stability improvements. (Eg: a sudden influx of people running explorer.exe might hint at something etc. ) Of course, MS telemetry is in many places and it's not always clear where so it is often a surprise to find these spots when you start looking.