If you only see the icon rotating, you cannot say what is actually being scanned - might be something in the program that’s making the access, not the file itself.
I’d suggest to open the File System Shield page and watch the “Last file scanned” field at least…