There is a method in process hacker, where you can search up explorer in tasks, double click, search strings with a minimum length of 4, filter by contains case insensitive, set file pattern to pcaclient, then save the search results to download. Basically what it does is show you the EXE files...