Due to the nature of these tools, they are frequently flagged by Windows Defender and other security suites as "HackTool" or "Potentially Unwanted Applications" (PUA). To bypass web-gateway filters and real-time scanning during the download process, distributors encrypt the archives.