Thanks, Denzel.
After further investigation, we’ve found that the user was created by the Backup & Restore Dropbox plug-in. We are still going through the plug-in’s code to figure out why this user is being created and if it’s doing anything malicious.
Does anyone know why a plug-in of this nature might need to create such a user?