u/Broskinatio

I am not familiar with malware analysis, so I’m looking for some insight on these sandbox results. This Fabric mod is triggering icacls.exe to modify ACLs and is showing MITRE ATT&CK tags like 'Process Injection' and 'Impair Defenses'. Is this kind of behavior standard for a mod like this, or is it something I should be concerned about?(my english is not good i am made caption with ai sorry guys)