2023-09-13 by mttaggart
Avast scans your network on the sly.
During scans, AvastSvc.exe will attempt to connect to neighboring IP addresses over SSH. Users such as FakeDomain\FakeUser will be used, as well as blank users/null SIDs.
AvastSvc.exe
FakeDomain\FakeUser
Documentation