Horrifying. That's exactly why simplewall [0] is among the first programs I install on Windows. Then I block stuff like compattelrunner.exe, devicecensus.exe, explorer.exe, the various Intel / Nvidia driver-related bullshit background processes the first time they attempt to connect to a remote server.
https://github.com/henrypp/simplewall