def rule(event):
    if all(
        [
            "\\CLSID\\" in event.deep_get("TargetObject", default=""),
            any(
                [
                    event.deep_get("TargetObject", default="").endswith(
                        "\\InprocServer32\\(Default)"
                    ),
                    event.deep_get("TargetObject", default="").endswith(
                        "\\LocalServer32\\(Default)"
                    ),
                ]
            ),
            any(
                [
                    "\\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{2155fee3-2419-4373-b102-6843707eb41f}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{4590f811-1d3a-11d0-891f-00aa004b2e24}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{4de225bf-cf59-4cfc-85f7-68b90f185355}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{ddc05a5a-351a-4e06-8eaf-54ec1bc2dcea}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{F82B4EF1-93A9-4DDE-8015-F7950A1A6E31}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{7849596a-48ea-486e-8937-a2a3009f31a9}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{0b91a74b-ad7c-4a9d-b563-29eef9167172}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{603D3801-BD81-11d0-A3A5-00C04FD706EC}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{30D49246-D217-465F-B00B-AC9DDD652EB7}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{A7A63E5C-3877-4840-8727-C1EA9D7A4D50}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{2227A280-3AEA-1069-A2DE-08002B30309D}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{2DEA658F-54C1-4227-AF9B-260AB5FC3543}\\"
                    in event.deep_get("TargetObject", default=""),
                    "\\{AA509086-5Ca9-4C25-8F95-589D3C07B48A}\\"
                    in event.deep_get("TargetObject", default=""),
                ]
            ),
            any(
                [
                    any(
                        [
                            ":\\Perflogs\\" in event.deep_get("Details", default=""),
                            "\\AppData\\Local\\" in event.deep_get("Details", default=""),
                            "\\Desktop\\" in event.deep_get("Details", default=""),
                            "\\Downloads\\" in event.deep_get("Details", default=""),
                            "\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\"
                            in event.deep_get("Details", default=""),
                            "\\System32\\spool\\drivers\\color\\"
                            in event.deep_get("Details", default=""),
                            "\\Temporary Internet" in event.deep_get("Details", default=""),
                            "\\Users\\Public\\" in event.deep_get("Details", default=""),
                            "\\Windows\\Temp\\" in event.deep_get("Details", default=""),
                            "%appdata%" in event.deep_get("Details", default=""),
                            "%temp%" in event.deep_get("Details", default=""),
                            "%tmp%" in event.deep_get("Details", default=""),
                        ]
                    ),
                    any(
                        [
                            all(
                                [
                                    ":\\Users\\" in event.deep_get("Details", default=""),
                                    "\\Favorites\\" in event.deep_get("Details", default=""),
                                ]
                            ),
                            all(
                                [
                                    ":\\Users\\" in event.deep_get("Details", default=""),
                                    "\\Favourites\\" in event.deep_get("Details", default=""),
                                ]
                            ),
                            all(
                                [
                                    ":\\Users\\" in event.deep_get("Details", default=""),
                                    "\\Contacts\\" in event.deep_get("Details", default=""),
                                ]
                            ),
                            all(
                                [
                                    ":\\Users\\" in event.deep_get("Details", default=""),
                                    "\\Pictures\\" in event.deep_get("Details", default=""),
                                ]
                            ),
                        ]
                    ),
                ]
            ),
        ]
    ):
        return True
    return False
