def rule(event):
    if any(
        [
            "\\SOFTWARE\\Classes\\CLSID\\{E08A0F4B-1F65-4D4D-9A09-BD4625B9C5A1}\\Model"
            in event.deep_get("TargetObject", default=""),
            any(
                [
                    "Classes\\AppXc52346ec40fb4061ad96be0e6cb7d16a\\"
                    in event.deep_get("TargetObject", default=""),
                    "Classes\\AppX3bbba44c6cae4d9695755183472171e2\\"
                    in event.deep_get("TargetObject", default=""),
                    "Classes\\CLSID\\{E3517E26-8E93-458D-A6DF-8030BC80528B}\\"
                    in event.deep_get("TargetObject", default=""),
                    "Classes\\CLSID\\{E08A0F4B-1F65-4D4D-9A09-BD4625B9C5A1}\\Model"
                    in event.deep_get("TargetObject", default=""),
                ]
            ),
            all(
                [
                    "\\SOFTWARE\\App\\" in event.deep_get("TargetObject", default=""),
                    any(
                        [
                            "AppXbf13d4ea2945444d8b13e2121cb6b663\\"
                            in event.deep_get("TargetObject", default=""),
                            "AppX70162486c7554f7f80f481985d67586d\\"
                            in event.deep_get("TargetObject", default=""),
                            "AppX37cc7fdccd644b4f85f4b22d5a3f105a\\"
                            in event.deep_get("TargetObject", default=""),
                        ]
                    ),
                    any(
                        [
                            event.deep_get("TargetObject", default="").endswith("Application"),
                            event.deep_get("TargetObject", default="").endswith("DefaultIcon"),
                        ]
                    ),
                ]
            ),
        ]
    ):
        return True
    return False
