Please check the URL.
/powershell-suspicious-script-with-clipboard-retrieval-capabilities.html