• They're not system processes, though. I see a NTUserName associated with the process and they're executing user stored procs called from a web app.