check process, get shell cmd output, replace string