probably telemetry of every running process, which ones have gui features, and which running process has a gui currently visible on your screen and sending all that data to MS.

obviously, that's just a guess.