def rule(event):
    if all(
        [
            "\\Software\\Classes" in event.deep_get("TargetObject", default=""),
            any(
                [
                    "\\Folder\\ShellEx\\ExtShellFolderViews"
                    in event.deep_get("TargetObject", default=""),
                    "\\Folder\\ShellEx\\DragDropHandlers"
                    in event.deep_get("TargetObject", default=""),
                    "\\Folder\\Shellex\\ColumnHandlers"
                    in event.deep_get("TargetObject", default=""),
                    "\\Filter" in event.deep_get("TargetObject", default=""),
                    "\\Exefile\\Shell\\Open\\Command\\(Default)"
                    in event.deep_get("TargetObject", default=""),
                    "\\Directory\\Shellex\\DragDropHandlers"
                    in event.deep_get("TargetObject", default=""),
                    "\\Directory\\Shellex\\CopyHookHandlers"
                    in event.deep_get("TargetObject", default=""),
                    "\\CLSID\\{AC757296-3522-4E11-9862-C17BE5A1767E}\\Instance"
                    in event.deep_get("TargetObject", default=""),
                    "\\CLSID\\{ABE3B9A4-257D-4B97-BD1A-294AF496222E}\\Instance"
                    in event.deep_get("TargetObject", default=""),
                    "\\CLSID\\{7ED96837-96F0-4812-B211-F13C24117ED3}\\Instance"
                    in event.deep_get("TargetObject", default=""),
                    "\\CLSID\\{083863F1-70DE-11d0-BD40-00A0C911CE86}\\Instance"
                    in event.deep_get("TargetObject", default=""),
                    "\\Classes\\AllFileSystemObjects\\ShellEx\\DragDropHandlers"
                    in event.deep_get("TargetObject", default=""),
                    "\\.exe" in event.deep_get("TargetObject", default=""),
                    "\\.cmd" in event.deep_get("TargetObject", default=""),
                    "\\ShellEx\\PropertySheetHandlers"
                    in event.deep_get("TargetObject", default=""),
                    "\\ShellEx\\ContextMenuHandlers" in event.deep_get("TargetObject", default=""),
                ]
            ),
            not any(
                [
                    event.deep_get("Image", default="") == "C:\\Windows\\System32\\drvinst.exe",
                    event.deep_get("Details", default="") == "(Empty)",
                    event.deep_get("Details", default="") == "",
                    all(
                        [
                            event.deep_get("Image", default="")
                            == "C:\\Windows\\System32\\svchost.exe",
                            "\\lnkfile\\shellex\\ContextMenuHandlers\\"
                            in event.deep_get("TargetObject", default=""),
                        ]
                    ),
                ]
            ),
            not event.deep_get("Details", default="") == "{807583E5-5146-11D5-A672-00B0D022E945}",
        ]
    ):
        return True
    return False
