Windows downloads the driver first, then the driver itself uses an AddSoftware directive to install a companion app. Which is ok when the app is a GPU control panel or similar, but here it was clearly abused.