Malware can kill processes such as AV process or monitoring process. For example, “wireshark.exe”, “ida.exe”, “procmon.exe” or any other process related to malware analysis tools in order to avoid the investigation.