(CommandLine:extrac32.exe* OR Image:\\extrac32.exe OR OriginalFileName:extrac32.exe) CommandLine:.cab* (CommandLine:\/C* OR CommandLine:\/Y* OR CommandLine:\ \\\\*)