def rule(event):
    if any(
        [
            event.deep_get("Image", default="").endswith("\\gmer.exe"),
            any(
                [
                    "MD5=E9DC058440D321AA17D0600B3CA0AB04" in event.deep_get("Hashes", default=""),
                    "SHA1=539C228B6B332F5AA523E5CE358C16647D8BBE57"
                    in event.deep_get("Hashes", default=""),
                    "SHA256=E8A3E804A96C716A3E9B69195DB6FFB0D33E2433AF871E4D4E1EAB3097237173"
                    in event.deep_get("Hashes", default=""),
                ]
            ),
        ]
    ):
        return True
    return False
