Suspicious clipboard content.

A suspicious script was copied to clipboard.

Command and Scripting Interpreter: PowerShell

Using powershell.exe command.

Drops file in System32 directory

Probable phishing domain