(Image:\\netsh.exe OR OriginalFileName:netsh.exe) ((CommandLine:firewall* CommandLine:set* CommandLine:opmode* CommandLine:disable*) OR (CommandLine:advfirewall* CommandLine:set* CommandLine:state* CommandLine:off*))