I went down that rabbit hole too when I thought it should have been idle. Turned out it was routine data integrity checks and indexing.
Ages ago Synology used to have (maybe still does) a virus scan utility based on clamav (I thiiiiiink) and it only found windows viruses I had in spam emails on my Mac backups.