(Image:\\wmic.exe OR OriginalFileName:wmic.exe) (CommandLine:useraccount* CommandLine:\ set\ * CommandLine:passwordexpires* CommandLine:false*)