Old driver installers use kernel-level access. Defender may quarantine the executable. Disable Real-time protection for 15 minutes.