T1504 powershell profile (#668)
T1504 powershell profile (#668)

* T1054 Powershell Profile take 2

* T1054 Powershell Profile Take 3

* pop calc.exe

* pop calc.exe v2

redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team,redcanaryco/atomic-red-team