If this incident was not explicitly initiated by the user, then further investigation is recommended as it might indicate the presence of malware or tampering by a malicious actor.