notebook snapshot
imphash data for new/future versions of pefile
adding simple yara worker