Some programs change their directories a LOT (Discord, Google Drive, Stremio) or in my case I keep portable programs in my own directory and sometimes either the name of the folder or program itself changes. I think it would be best instead of playing a cat and mouse game or accidentally not sending your intended program through the VPN, that it can tell what directory it's in and send everything that way through it. I know when using Stremio, they changed node.exe to stremio-runtime.exe and I didn't notice which left it unfiltered. I know this is for the blacklist method and the whitelist one would be the "safer than sorry" route but that would make the cat and mouse process of adding them tedious.