I mean - it's storing executable files only.
I'm not completely sure if it's really all of them, or just those with common extensions (exe, dll, etc.) - I'd have to check the source code thoroughly.
And yes, the files are scanned before creating/updating their VRDB records.