Any data that enters your system from outside a trust boundary should be treated as untrusted until proven otherwise. That includes form fields, API payloads, file uploads, headers, cookies, queue ...
You must get hold of the program name when the Command Prompt appears. If it appears multiple times, then you should have a chance to notice it. If you can note the ...