def rule(event):
    if any(
        [
            event.deep_get("ImageLoaded", default="").endswith("\\panmonfltx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dbutil.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\fairplaykd.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nvaudio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\superbmc.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bsmi.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\smarteio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bwrsh.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\agent64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asmmap64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dellbios.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\chaos-rootkit.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\wcpu.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dh_kernel.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\sbiosio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bw.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrdrv102.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nt6.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\mhyprot3.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winio64c.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asupio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\blackbonedrv10.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\d.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\driver7-x86.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\sfdrvx32.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\enetechio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\gdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\sysinfodetectorx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\fh-ethercat_dio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asromgdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\my.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dcprotect.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\irec.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\gedevdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winio32a.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\gvcidrv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winio32.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_hwmio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nstr.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\inpoutx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\hw.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\hpportiox64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\iobitunlocker.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\b1.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\aoddriver.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\elbycdio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\protects.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\kprocesshacker.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\speedfan.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\radhwmgr.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\iscflashx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\black.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\b4.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\hwos2ec10x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winflash64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\corsairllaccess64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_i2cio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\d3.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\windows-xp-64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\aswvmm.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_i2c64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\1.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nchgbios2x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\cpuz141.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\segwindrvx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\tdeio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ntiolib.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\gtckmdfbs.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\iomap64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\avalueio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\semav6msr.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\lgdcatcher.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\b.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\hwdetectng.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nt4.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\tgsafe.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\mydrivers.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\eneio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\procexp.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\viragt64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\fpcie2com.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\lenovodiagnosticsdriver.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\cp2x72c.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\kerneld.amd64"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_def64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\piddrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\amifldrv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\cpuz_x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\proxy32.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\wsdkd.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\t8.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ucorew64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\atszio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\lmiinfo.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\80.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nt3.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ngiodriver.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\lv561av.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\gpcidrv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith(
                "\\fd3b7234419fafc9bdd533f48896ed73_b816c5cd.sys"
            ),
            event.deep_get("ImageLoaded", default="").endswith("\\rtport.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\full.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\viragt.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\fiddrv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\cupfixerx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\cpupress.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\hwos2ec7x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\driver7-x86-withoutdbg.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrdrv10.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nvflsh64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrrapidstartdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\tmcomm.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\wiseunlo.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\rwdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nvoclock.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\panio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\mtcbsv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\amigendrv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\capcom.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\netflt.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\phlashnt.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dbutil_2_3.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ni.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ntiolib_x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\atszio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\lgcoretemp.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\lha.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\phymem64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dbutildrv2.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrdrv103.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\rtcore64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_hwmio64_w10.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ene.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winio64b.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\piddrv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\directio32.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\monitor_win10_x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nt5.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrsmartconnectdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\rtif.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\atillk64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\directio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asribdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\kfeco11x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\citmdrv_ia64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\sysdrv3s.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\amp.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\vboxdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\adv64drv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\hostnt.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\phymem_ext64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\echo_driver.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winiodrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\pdfwkrnl.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\glckio2.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrdrv106.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nscm.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_rcio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ncpl.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\sandra.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\fiddrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\hwrwdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\mhyprot.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrsetupdrv103.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\iqvw64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\b3.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ssport.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_def.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\computerz.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\windows8-10-32.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nstrwsk.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\lurker.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bsmemx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\wyproxy64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\t3.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\cpuz.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\rtkio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\driver7-x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\netfilterdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ioaccess.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\testbone.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\gameink.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\kevp64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\mhyprot2.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\se64a.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\vboxusb.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\windows7-32.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\vproeventmonitor.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winio64a.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrdrv101.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\netproxydriver.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\elrawdsk.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\zam64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\cg6kwin2k.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asupio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\stdcdrvws64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\81.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\citmdrv_amd64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\amdryzenmasterdriver.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\vmdrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\sysinfo.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\alsysio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\directio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\rzpnk.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\amdpowerprofiler.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\truesight.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\wirwadrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\phymemx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\msio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\sepdrv3_1.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\gametersafe.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_rcio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\d4.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\t.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\eio.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nt2.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winring0.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\physmem.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\libnicm.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\msio32.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrautochkupddrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asio32.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\etdsupp.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\smep_namco.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bandai.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\d2.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\magdrvamd64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nvflash.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\goad.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\proxy64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\amsdk.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\kbdcap64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\vdbsv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\pchunter.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\sysconp.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dh_kernel_10.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\msrhook.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bedaisy.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dcr.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\panmonflt.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bsmixp64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\otipcibus.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\fidpcidrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\kfeco10x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asrdrv104.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\c.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\tdklib64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bsmix64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_flash64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\stdcdrv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\naldrv.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ctiio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bwrs.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nicm.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\winio32b.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\paniox64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\ecsiodriverx64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\iomem64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\fidpcidrv64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\aswarpot.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\bs_rciow1064.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\asmio64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\openlibsys.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\viraglt64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\dbk64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\t7.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\atlaccess.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\nbiolib_x64.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\smep_capcom.sys"),
            event.deep_get("ImageLoaded", default="").endswith("\\iqvw64e.sys"),
        ]
    ):
        return True
    return False
