it's in the commandline property of the running process #include "_ProcessListProperties.au3" #include <Array.au3> ShellExecute('Notepad.exe') $avRET = _ProcessListProperties("notepad.exe") _ArrayDisplay($avRET) $cmdline = $avRet[1][9] MsgBox($MB_SYSTEMMODAL, 'Cmdline or where is my process called from? ', $cmdline) #include <Array.au3>; Only for _ArrayDisplay() ; Install a custom error handler Global $oMyError