[Hackers]

The difference between a static encryption & runtime methods is simple. A static "crypt" is when your program has no known signatures or red flags for its raw binary / compiled program / data. A runtime crypt utilizes methods that obfuscate, mutate, hide, escalate, and loads/runs your program. A runtime licensing or privacy related crypted program usually utilized memory, signed drivers, protected data spaces, and other methods for maximum security, as well as uniqueness to handle all env/sys settings, errors, etc.

It's important to know the diff between a static and runtime scan because if you want to check if a program you download is safe, a static scan is not enough.
If you want to protect your own programs or utilize a custom licensing program for more private runtimes, then there are many features needed.