There is a way to do it, and blocking or killing the process is not the way as it will attract immediate attention.

The way to do it is to monitor for the process and spoof it with false information so the admin sees what you want hiom to, not what is actually happening.

That would take a considerable amount of knowledge and skill, but I would expect that the software will not be protected against that approach. You would still have the problem of loading your "spoofware" without admin rights