1. Yes, it's a module used for both scanning and protecting.
2. Yes, it will show something like "MalPE.XX" where XX is the AI score.
3. That is strange, is it the service using CPU or you see System process CPU spike ? The service does pretty much nothing when you don't open anything.