What makes you think it's scanning, and not e.g. preloading items from disk cache into RAM? Maybe run it under strace and see what it's accessing?
Chrome also used to do this under a separate process called "Software Quality Monitor", but now it does not show in task manager as a separate process.
I'm not hallucinating nor BS-ing, it's a real thing.