It turns out it was a job after all. I was able to run sp_who2 at the right time and that's how I saw a job was running.