TargetFilename:\\All.cab OR TargetFilename:.ntds.cleartext