The message is from avast, but avast is not trying to “brute force” anything.

Ofcourse avast only alerts for it after a scan.
This detection is not part of the real time protection.