That's coming from Outlook. When the mailto: protocol is invoked, Windows looks at the registry entry HKEY_CLASSES_ROOT\mailto\shell\open\command for the command-line. On my computer it is

The %1...