Where did this come from?

I downloaded all the patches yesteday.

One patch wanted to call home:

A file called MPCmdRun.exe wanted to call 207.46.236.88

WhoIs Lookup performed by Karen's WhoIs
http://www.karenware.com/

OrgName: Microsoft Corp
OrgID: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US

NetRange: 207.46.0.0 - 207.46.255.255
CIDR: 207.46.0.0/16
NetName: MICROSOFT-GLOBAL-NET
NetHandle: NET-207-46-0-0-1
Parent: NET-207-0-0-0-0
NetType: Direct Assignment
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:
RegDate: 1997-03-31
Updated: 2004-12-09
RTechHandle: ZM39-ARIN
RTechName: Microsoft
RTechPhone: +1-425-882-8080
RTechEmail:

OrgAbuseHandle: HOTMA-ARIN
OrgAbuseName: Hotmail Abuse
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail:

OrgAbuseHandle: MSNAB-ARIN
OrgAbuseName: MSN ABUSE
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail:

OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail:

OrgNOCHandle: ZM23-ARIN
OrgNOCName: Microsoft Corporation
OrgNOCPhone: +1-425-882-8080
OrgNOCEmail:

OrgTechHandle: MSFTP-ARIN
OrgTechName: MSFT-POC
OrgTechPhone: +1-425-882-8080
OrgTechEmail:

# ARIN WHOIS database, last updated 2006-02-14 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

No idea. I'd look for some other "whosis" on your system.

--

....Sky

Tom "Sky" King
============

David Sherman wrote:
> I downloaded all the patches yesteday.
>
> One patch wanted to call home:
>
> A file called MPCmdRun.exe wanted to call 207.46.236.88

I found this file (MpCmdRun.exe) in \Program Files\Windows Defender.
It's digitally signed by Microsoft.