Medicat is full of stuff Widows Defender hates. You can't get it near a running OS.
Solution: I have an "Excluded" folder and I exclude it from Defender's scan.
Why bother? Sometimes I want to use something in Medicat without booting it up.
I can keep the PortableApps platform up to date as well.