(OriginalFileName:msteams.exe OR OriginalFileName:teams.exe) (-(Image:\\msteams.exe OR Image:\\teams.exe))