Malware may include functionality that only runs during a computer’s typical working hours as an anti-forensics, anti-analysis technique.
The basic idea is that it only runs while the user is typically active to camouflage its activity and hide within the noise.