German Federal Cyberintelligence details the 534 worker processes that track users in a default Windows install, including registry location and server IPs.