You guessed it right, it's avira.
See this familiar savapi and HBEDV.key and you'll know.
This is not the only vendor that calls avira "NGAV", heimdal does it too...
btw, They are not registered to windows security center, as you can see windows security center thinks I only have DeepInstinct and Microsoft Defender in my virtual machine.
View attachment 273264