: Security software often flags keygens because they use "virus-like" behaviors such as process hiding or binary patching to bypass security.