diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7baa0ded..78cc66d2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -28,7 +28,7 @@
 
 Deprecation notice: as described in [#937](https://github.com/mandiant/capa/issues/937), we plan to remove the SMDA backend for v5. If you rely on this backend, please reach out so we can discuss extending the support for SMDA or transitioning your workflow to use vivisect.
 
-### New Rules (27)
+### New Rules (28)
 
 - data-manipulation/encryption/aes/manually-build-aes-constants huynh.t.nhan@gmail.com
 - nursery/get-process-image-filename michael.hunhoff@mandiant.com
@@ -57,6 +57,7 @@ Deprecation notice: as described in [#937](https://github.com/mandiant/capa/issu
 - nursery/send-keystrokes anushka.virgaonkar@mandiant.com
 - nursery/send-request-in-dotnet anushka.virgaonakr@mandiant.com
 - nursery/terminate-process-by-name-in-dotnet anushka.virgaonkar@mandiant.com
+- nursery/hash-data-using-rshash @_re_fox
 -
 
 ### Bug Fixes
diff --git a/README.md b/README.md
index 56860017..272659f8 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 [![PyPI - Python Version](https://img.shields.io/pypi/pyversions/flare-capa)](https://pypi.org/project/flare-capa)
 [![Last release](https://img.shields.io/github/v/release/mandiant/capa)](https://github.com/mandiant/capa/releases)
-[![Number of rules](https://img.shields.io/badge/rules-693-blue.svg)](https://github.com/mandiant/capa-rules)
+[![Number of rules](https://img.shields.io/badge/rules-694-blue.svg)](https://github.com/mandiant/capa-rules)
 [![CI status](https://github.com/mandiant/capa/workflows/CI/badge.svg)](https://github.com/mandiant/capa/actions?query=workflow%3ACI+event%3Apush+branch%3Amaster)
 [![Downloads](https://img.shields.io/github/downloads/mandiant/capa/total)](https://github.com/mandiant/capa/releases)
 [![License](https://img.shields.io/badge/license-Apache--2.0-green.svg)](LICENSE.txt)
diff --git a/rules b/rules
index dcc2e74c..9d74812a 160000
--- a/rules
+++ b/rules
@@ -1 +1 @@
-Subproject commit dcc2e74c84876495377d1b0eb86e6b07a3ece414
+Subproject commit 9d74812a5f04aeeae8083b90106906f9e3e4dfb8