Here's one of the input blocks:

http://blockexplorer.com/address/1eHhgW6vquBYhwMPhQ668HPjxTtpvZGPC

Definitely MtGOX, they used those 424242 transactions in the past to prove that they had control of funds after the hack.