def rule(event):
    if event.deep_get("TargetObject", default="").endswith(
        "\\Software\\AppDataLow\\Software\\Microsoft\\3A861D62-51E0-7C9D-AB0E-15700F2219A4"
    ):
        return True
    return False
