account unknown (S-1-15-3-1024-3424233489-972189580-2057154623-747635277-1604371224-316187997-3786583170-1043257646)
account unknown (S-1-15-3-1024-2302894289-466761758-1166120688-1039016420-2430351297-4240214049-4028510897-3317428798)
When checking security settings for the Brave browser, I encounter the two accounts listed above. Is this cause for concern? Am I being spied on by someone? Please advise.
At first:
Welcome to the Brave community! 
To your situation:
I think this has to do with inheriting with the sub-processes in relation to the main process, which the brave browser generates.
This behavior is normal and intended. When you click on it, you should see that they have only the Read and Read and Write permissions. It has to do with the security of browser in general. There is a main process which then generates sub-process to maintain different tasks for tabs or also for extensions of course.
I have the same behavior on my PC as you described. Either I’m right, or we are both screwed. 
Jokes aside, I really think there is no reason for fear, I could be wrong though. 
Maybe @Mattches can explain it better or even correct me if I’m wrong. He has for sure more in-depth knowledge about the inside of the brave browser than myself.
In the meanwhile, you can prove my thoughts and theory in the PowerShell console.
Proving in the PowerShell console:
Get-LocalUser | select *You will see every account on the system which is set up. Important is the SID section. There you can compare the SID number with the one of the brave process, none of the showed will be the same. This would speak for my thought, which I explained before.
Example Output:
PS C:\Users\LxWulf> Get-LocalUser | select *
AccountExpires :
Description : Built-in account for administering the computer/domain
Enabled : False
FullName :
PasswordChangeableDate :
PasswordExpires :
UserMayChangePassword : True
PasswordRequired : True
PasswordLastSet :
LastLogon :
Name : Administrator
SID : S-1-5-21-3125920521-3760155660-3586067557-500
PrincipalSource : Local
ObjectClass : User
(...)
Important Notice:
This content has been prepared in good faith. There is no 100% guarantee that it is correct. You should always be careful with the safety of your own devices and contact a professional if you are unsure.As I said, I think this is a false alarm, but you never know, better one alarm too many than none.
Thank you for your response, I compared the SID numbers with the ones that appeared in the browser and indeed they don’t match. You’ve reassured me a bit, but I’m not sure what to think about it. I had the same problem on the C drive before, but I managed to fix it. Thanks again for the quick response, when I read it, I could sleep peacefully, but I hope some specialist will comment on the matter. Regards. 
All chromium based browsers have this!
Some explanation you can find in this link:
https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/sids-not-resolve-into-friendly-names#:~:text=DO%20NOT%20DELETE%20capability%20SIDS,UI%20to%20add%20it%20back.
As for the fear that you are being spied, you are using Microsoft Windows, so sleep peacefully, no one spying on you! 
@tonialb thank you for the participation and help. I also learned something new. And I see another reason besides many why I use Fedora Linux mainly. 
Notice for @Kenkox :
Please marktonialbhis post as solved. This helps to keep an overview of the posts to see which one are already solved. Also, it helps others to find their answer faster if they have the same situation or question as you had.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.