Probably because of what it does might be considered suspicious.

That is why I suggest virustotal with 43 different scanners.