If you are running Whonix in KVM you will see that user "nobody" uses those processes, pretty neat.