Synowedjat is a backdoor from Synology. When checking package updates, it is downloaded from the server and executed, no matter whether you are using a genuine Synology device or not. It is highly recommended to remove it. Specifically: 1. When the background service checks for updates, "synopkg chkupgradepkg" is invoked 2. "synopkg chkupgradepkg" starts synowedjat-exec 3. synowedjat-exec    - Uploads hardware info to account.synology.com/wedjat    - Downloads and extracts synowed