smartscreen.exe: What It Is, Safety Checks and Crash Fixes

smartscreen.exe is normally a legitimate Windows security process, not a virus. It belongs to Microsoft Defender SmartScreen, which checks the reputation of downloads and helps warn you about unsafe content. Seeing it in Task Manager, without an alert or other symptom, is not a reason to remove it. If you are concerned about the process on your PC, the simplest next step is a full scan with Gridinsoft Anti-Malware. You do not need to investigate certificates or compare file hashes first.

Leave the Windows component in place. If the scan finds no threats and the PC works normally, there is no reason to remove SmartScreen. If an application error or persistent high CPU remains, follow the Windows troubleshooting steps below instead of deleting the executable.

What is smartscreen.exe?

Microsoft Defender SmartScreen uses reputation information to check downloaded applications and warn about potentially unsafe or unfamiliar files. An unfamiliar download can trigger a warning even when it is not confirmed malware. The smartscreen.exe process is part of that protection; simply seeing its name in Task Manager is not a sign of infection. [1]

SmartScreen is different from Microsoft Defender Antivirus, which scans for malware. Smart App Control is another Windows security feature that can block untrusted apps and works alongside antivirus software. These names are related, but a problem with one does not mean you need to switch off all three. [3]

How to check smartscreen.exe for malware

If the process worries you, or unusual activity began after an unknown download, start with a scan. A filename alone cannot tell you whether the file on your computer is genuine. A full scan also checks beyond that one name: malware elsewhere on the PC may be responsible for the symptom.

1. Download and install Gridinsoft Anti-Malware. Open it and update the threat database.
2. Run a Full Scan and let it finish.
3. Review the results and apply the recommended cleanup for detected threats. Do not manually delete the Windows SmartScreen file just because it appeared in Task Manager.
4. Restart the PC and check whether the original symptom returns.

No threats found, no continuing symptoms: leave SmartScreen alone and keep Windows and your security software updated. “No threats detected” is a reassuring scan result, not an absolute guarantee about every file.

Threats found, or the problem returns: complete the cleanup and save the scan report if you need help. A returning alert can involve another component, startup entry, or scheduled task; repeatedly deleting one visible file may miss the cause. Contact support with the report if the same detection returns after restart.

Optional: check which smartscreen.exe is running

The scan above is the main check for suspicious activity. If you still need to identify the file or give support more detail, use the steps below. You do not need to do this before scanning.

1. Press Ctrl + Shift + Esc to open Task Manager. Find Windows Defender SmartScreen or smartscreen.exe, then right-click it and choose Open file location. Inspect the file associated with that running entry, rather than searching for a different copy by name.
2. The usual Windows location is C:\Windows\System32\smartscreen.exe (the drive can differ if Windows is installed elsewhere). A same-name executable running from Downloads, Temp or a user-profile folder deserves investigation. The location is a clue, not a malware verdict.
3. Open the file’s Properties. If a Digital Signatures tab is present, select the Microsoft signature and open Details to check its status. A Microsoft company name on the Details tab is only descriptive text; it is not signature validation.

No Digital Signatures tab? Do not label the file malicious on that basis. Windows files can use a catalog signature. For an optional technical check, Windows PowerShell’s Get-AuthenticodeSignature command can inspect both embedded and catalog signing. Replace the path below with the exact path obtained from Task Manager. This reads signature information without launching the file. [4]

Get-AuthenticodeSignature -LiteralPath 'C:\Windows\System32\smartscreen.exe' |
  Format-List Status, StatusMessage, SignerCertificate

• Expected Windows path and a valid Microsoft signature: these support the file’s Windows identity. If a crash continues after a scan finds no threats, follow the Windows repair section instead of deleting the file. A valid signature does not establish that the whole PC is uncompromised.
• Unexpected path, different publisher or an unverified signature: keep the exact path and result for review, and follow up on the scan findings. A validation failure needs explanation; it is not permission to erase a system file or restore a quarantined one.

For a different downloaded executable, use the broader guide to checking an EXE before running it. Do not open an unknown file merely to see whether SmartScreen approves it.

Should you disable SmartScreen or end the process?

Leave SmartScreen enabled. Its download-reputation checks serve a different purpose from a malware scan, so installing antivirus software is not a reason to remove the Windows component. Ending a process is not an uninstall or a repair, and a later appearance of its name does not by itself mean malware has returned. Use the symptom-specific steps below if it is persistently busy or crashing.

What if smartscreen.exe uses high CPU?

A brief burst of activity while opening a downloaded application is different from a process that keeps the PC busy after you have stopped opening files. High CPU by itself does not establish that the process is malware.

• Activity settles and the PC works normally: leave the process running. There is no need to disable protection to make every Task Manager entry disappear.
• Activity repeatedly starts with one installer or app: stop retrying that file. If you still need the software, obtain the current installer from its official publisher and check for an update to the affected app.
• Load continues after a restart: run the scan above, install available Windows updates, and restart again. If the scan finds no threats but the load persists, investigate it as a Windows or application problem.

Make sure the busy process is actually smartscreen.exe. Advice for an antivirus scan consuming CPU addresses a different task. Old Windows 10 support discussions also do not establish that the same bug affects your current Windows build.

How to handle a smartscreen.exe application error or crash

For an error that keeps returning, note the exact message and whether it happens with one downloaded app or with several unrelated apps. This small distinction determines the next step:

• One app triggers it: update or replace that app’s installer through its official source. If an unknown download caused the problem, do not keep launching it to test.
• Several apps trigger it, or Windows features also fail: install available Windows updates and restart. If the problem persists, use the built-in repair procedure below.

Microsoft recommends updating and restarting Windows before running its system-file repair tools. Open Command Prompt as administrator, then run this command: [2]

DISM.exe /Online /Cleanup-image /Restorehealth

After DISM reports that the operation completed successfully, run:

sfc /scannow

Let verification reach 100%, then restart and check the original error. These tools repair Windows components; they do not replace a malware scan or guarantee a fix for every application crash. If a command fails or the error continues, keep the exact result for Microsoft support or your IT administrator.

Do not download a replacement smartscreen.exe from an EXE download site, take ownership of the system file to delete it, or disable reputation protection as a repair. Those actions can remove protection without resolving the underlying problem.

What if the crash names CHXSmartScreen.exe?

CHXSmartScreen.exe is a different filename. A July 2024 Microsoft community report, for example, recorded it under a Windows SystemApps package named Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy when some programs failed to open from File Explorer. That is a user’s crash report, not confirmation that every CHXSmartScreen.exe error has the same cause. Do not apply the System32 path check for smartscreen.exe to this different name. [5]

Search Start for View reliability history, select the failure at the time the problem occurred, and open its technical details if available. Save the faulting application name and path, faulting module, exception code and your Windows version/build. Those details help support distinguish an app-specific failure from a Windows component problem. Use the one-app versus several-apps steps above; do not download a replacement EXE or remove an app’s security restrictions just to suppress the crash.

Is the message actually a SmartScreen warning?

“Windows protected your PC” is a download-reputation warning, not a smartscreen.exe crash. Use the Windows protected your PC guide for that decision. Do not treat a warning as an instruction to repair or remove SmartScreen.

If the issue is an unavailable setting rather than a failing process, follow the SmartScreen for Microsoft Edge grayed-out guide. On a work or school PC, let the administrator handle enforced settings.

References

1. Microsoft. “Microsoft Defender SmartScreen.” Microsoft Learn, updated April 23, 2026; accessed November 8, 2026. SmartScreen overview.
2. Microsoft. “Using System File Checker in Windows.” Microsoft Support, accessed November 8, 2026. System-file repair procedure.
3. Microsoft. “Smart App Control Frequently Asked Questions.” Microsoft Support, accessed November 8, 2026. Smart App Control and antivirus.
4. Microsoft. “Get-AuthenticodeSignature.” PowerShell documentation, Microsoft Learn; accessed November 8, 2026. Signature and catalog checks.
5. Anonymous community contributor. “MoAppCrash and wwahost Application Error.” Microsoft Q&A, July 23, 2024; accessed November 8, 2026. Reported CHXSmartScreen.exe crash details.