I am usually in shadow mode so I can't/don't want to test other apps now
so I have tried different app (TCPViewPortable
http://portableapps.com/apps/utilities/tcpview-portable), still same error
for rules you mean this? This is for renamed one
program path: Z:\1\TCPViewPortable.exe
windows user name: --------------
can execute programs: allow
can be executed: alert
can execute sub-programs: inapplicable
trust level (full green)
vendor: Rare Ideas, LLC (add to trusted)
for not yet renamed it's same except for path, no vendor, trust level and hash is empty
EDIT:
also the not yet renamed location should be red (files not found) but ReHIPS still think that files still exist, only if I restart GUI it will show files not found