Known webshell marker string

A named-webshell identifier string appeared but no script body was matched around it (e.g. the marker sits in a binary or document). Surfaced at medium for review as a likely hacktool artifact; the bare 3-char forms (c99/r57) are deliberately excluded to avoid coincidental substring matches in large binaries.