Comment by voltagex_

Looking at Yara rules - I won't have time today but a unique-ish string in the script was

adsbyText:"ADS BY "+

including quotes.