def rule(event):
    if "\\AppData\\Local\\Temp\\ba9ea7344a4a5f591d6e5dc32a13494b\\" in event.deep_get(
        "TargetFilename", default=""
    ):
        return True
    return False
