We are trying to identify what is taking a SQL backup. The physical device name is just a guid which I have seen before when using a VSS type backup but I don't see any backup agent software installed on the host and there are no maintenance plans or jobs running any backups so we are kinda stumped. We are going to try and use Wireshark to see if we can determine anything. Anyone have any ideas about identifying what is running the backup? See screenshot of the backup. Thanks
12/22/2022 04:47:55,spid60,Unknown,I/O is frozen on database msdb. No user action is required. However if I/O is not resumed promptly you could cancel the backup.