(EventID:4663 ObjectType:File ObjectName:\\AppData\\Roaming\\Signal\\* (ObjectName:\\config.json OR ObjectName:\\db.sqlite)) (-(ProcessName:\\signal\-portable.exe OR ProcessName:\\signal.exe))