save rules and add virustotal-api module