Hey Microsoft !
Your Safety scanner recursively scans directories without testing them if they are symbolic links in jar files! It is stuck in a loop ! Should not be. As this, it is unusable. Please fix it ! ( and no, my laptop doesn't have 18 million files )
The looping problem seems to be related to jar files inspection. For instance, Webstorm\plugins\vcs-git\lib\vcs-git.jar makes a loop in safety scanner