def rule(event):
    if any(
        [
            all(
                [
                    any(
                        [
                            event.deep_get("OriginalFileName", default="") == "3CXDesktopApp.exe",
                            event.deep_get("Image", default="").endswith("\\3CXDesktopApp.exe"),
                            event.deep_get("Product", default="") == "3CX Desktop App",
                        ]
                    ),
                    "18.12." in event.deep_get("FileVersion", default=""),
                ]
            ),
            any(
                [
                    "SHA256=DDE03348075512796241389DFEA5560C20A3D2A2EAC95C894E7BBED5E85A0ACC"
                    in event.deep_get("Hashes", default=""),
                    "SHA256=54004DFAA48CA5FA91E3304FB99559A2395301C570026450882D6AAD89132A02"
                    in event.deep_get("Hashes", default=""),
                    "SHA256=D45674F941BE3CCA2FBC1AF42778043CC18CD86D95A2ECB9E6F0E212ED4C74AE"
                    in event.deep_get("Hashes", default=""),
                    "SHA1=480DC408EF50BE69EBCF84B95750F7E93A8A1859"
                    in event.deep_get("Hashes", default=""),
                    "SHA1=3B43A5D8B83C637D00D769660D01333E88F5A187"
                    in event.deep_get("Hashes", default=""),
                    "SHA1=6285FFB5F98D35CD98E78D48B63A05AF6E4E4DEA"
                    in event.deep_get("Hashes", default=""),
                    "MD5=BB915073385DD16A846DFA318AFA3C19" in event.deep_get("Hashes", default=""),
                    "MD5=08D79E1FFFA244CC0DC61F7D2036ACA9" in event.deep_get("Hashes", default=""),
                    "MD5=4965EDF659753E3C05D800C6C8A23A7A" in event.deep_get("Hashes", default=""),
                    "SHA256=FAD482DED2E25CE9E1DD3D3ECC3227AF714BDFBBDE04347DBC1B21D6A3670405"
                    in event.deep_get("Hashes", default=""),
                    "SHA256=5D99EFA36F34AA6B43CD81E77544961C5C8D692C96059FEF92C2DF2624550734"
                    in event.deep_get("Hashes", default=""),
                    "SHA256=A60A61BF844BC181D4540C9FAC53203250A982E7C3AD6153869F01E19CC36203"
                    in event.deep_get("Hashes", default=""),
                    "SHA1=E272715737B51C01DC2BED0F0AEE2BF6FEEF25F1"
                    in event.deep_get("Hashes", default=""),
                    "SHA1=8433A94AEDB6380AC8D4610AF643FB0E5220C5CB"
                    in event.deep_get("Hashes", default=""),
                    "SHA1=413D9CBFCBF8D1E8304EAB0AA5484F5EEC5185F5"
                    in event.deep_get("Hashes", default=""),
                    "MD5=9833A4779B69B38E3E51F04E395674C6" in event.deep_get("Hashes", default=""),
                    "MD5=704DB9184700481A56E5100FB56496CE" in event.deep_get("Hashes", default=""),
                    "MD5=8EE6802F085F7A9DF7E0303E65722DC0" in event.deep_get("Hashes", default=""),
                    "SHA256=AA124A4B4DF12B34E74EE7F6C683B2EBEC4CE9A8EDCF9BE345823B4FDCF5D868"
                    in event.deep_get("Hashes", default=""),
                    "SHA256=59E1EDF4D82FAE4978E97512B0331B7EB21DD4B838B850BA46794D9C7A2C0983"
                    in event.deep_get("Hashes", default=""),
                    "SHA1=BEA77D1E59CF18DCE22AD9A2FAD52948FD7A9EFA"
                    in event.deep_get("Hashes", default=""),
                    "SHA1=BFECB8CE89A312D2EF4AFC64A63847AE11C6F69E"
                    in event.deep_get("Hashes", default=""),
                    "MD5=F3D4144860CA10BA60F7EF4D176CC736" in event.deep_get("Hashes", default=""),
                    "MD5=0EEB1C0133EB4D571178B2D9D14CE3E9" in event.deep_get("Hashes", default=""),
                ]
            ),
        ]
    ):
        return True
    return False
