The installer writes low-level port commands. Windows Defender may flag this as a threat. Temporarily disable real-time protection and set UAC to "Never notify."