Some PIDs generated by this applet aren't generated by pokesav, those same PIDs cannot be read by IVPID.exe, and when the IV PID combination is fed into legal.exe, it considers the pokemon hacked.
Consider the PID 0454085950, generated by the IVs 20/20/20/20/20/20 with a nature of 0 (hardy).