what is executed behind cmd

to find the execution behind a cmd. Execute a PowerShell with administrator rights.

win32_process | fl commandline