You can use the tlist.exe executable from the Resource Kit to get the 'CmdLine' for a running process. You need to pass tlist the pid as an arg and then parse the output, as you'll also get all the loaded modules and memory info. Another option would be to write the PID of the process out to a file and then check the file. As bsdz mentioned, you can also get the CmdLine param from WMI, on XP/2003. Tlist will work on NT4+.