Hello
Thank you for your question and reaching out. I can understand you are having query\issues related to Event ID 4776
It seems like some service tried to logon some user with incorrect user credentials. Please check whether there are services that logon as those accounts.
Also it may due to this account have configured in some Task scheduler or services having older credentials due to which it gets logged as bad password.
--If the reply is helpful, please Upvote and Accept as answer--