I believe it scans the data stream in real time, it doesn’t wait for all of the download/page data to fully arrive before it is scanned.