If you have Windows Defender running, the malware signature updates for it come every few days via Windows Update. That may well explain your situation.
I find it a bit of a pain as I don't want 'normal' Windows Updates to install automatically, just notify. But I'd prefer Windows Defender signature updates to install automatically (just like my Avast ones do). But seems you can't have it both ways.