You must get hold of the program name when the Command Prompt appears. If it appears multiple times, then you should have a chance to notice it. If you can note the ...

Any data that enters your system from outside a trust boundary should be treated as untrusted until proven otherwise. That includes form fields, API payloads, file uploads, headers, cookies, queue ...