Probably because of what it does might be considered suspicious.
That is why I suggest virustotal with 43 different scanners.