SHA-256 hash of Rate_Confirmation_LD-2026-0847.bat — initial batch file payload downloaded from phishing site
