I don't think rooting it, because there are many antiviruses that don't need rooting. If I have to guess, I would say that it scans the files for signature. And they gain access to files similar to the work of file explorers. Someone more knowledgeable can fix me.
source
to share