The message is from avast, but avast is not trying to “brute force” anything.
Ofcourse avast only alerts for it after a scan. This detection is not part of the real time protection.