Is it a Virus?
✔ NO - Safe
Must be in C:\Program Files\PowerShell\pwsh-preview\pwsh-preview.exe or C:\Program Files (x86)\PowerShell\pwsh-preview\pwsh-preview.exe
Can I Disable?
✔ YES
Disabling pwsh-preview will stop preview features from loading and may prevent you from running new cmdlets or scripts that rely on preview modules
Is pwsh-preview stable?
Depends on the build; expect occasional instability in preview features
Preview builds may occasionally crash or behave differently than stable pwsh.exe
What is pwsh-preview.exe?
pwsh-preview.exe is the preview build of the PowerShell command shell used to test new features and improvements before they ship to the stable pwsh.exe. It launches when you start PowerShell Preview, or when a script or module invokes the preview runtime.
pwsh-preview.exe hosts the PowerShell runtime, loads preview modules, and executes commands and scripts. It may spawn background jobs and remoting sessions; its behavior mirrors pwsh.exe but targets experimental features for testing.
Quick Fact: PowerShell Preview runs side-by-side with the stable PowerShell core, enabling testing without disrupting your regular PowerShell sessions.
Types of PowerShell Processes
- PowerShell Host Process: Main PowerShell console or ISE-like session (1+ instances)
- Script Execution Process: Each pipeline or script block runs in its own child process
- Background Job Process: PowerShell jobs run in separate processes
- Remoting Process: WSMan/PowerShell Remoting sessions use dedicated processes
- Module Loader Process: Loading and unloading preview modules occurs in a separate worker
- Utility Process: Auxiliary tasks like formatting, progress reporting, and telemetry
Is pwsh-preview.exe Safe?
Yes, pwsh-preview.exe is safe when obtained from official Microsoft channels (GitHub PowerShell releases or the Microsoft Store) and located in the proper PowerShell folders.
Is pwsh-preview.exe a Virus or Malware?
The real pwsh-preview.exe is not a virus. Malware may mimic names; verify the digital signature and location to confirm authenticity.
How to Tell if pwsh-preview.exe is Legitimate or Malware
- File Location:: Must be in
C:\Program Files\PowerShell\pwsh-preview\pwsh-preview.exe or C:\Program Files (x86)\PowerShell\pwsh-preview\pwsh-preview.exe. Any pwsh-preview.exe elsewhere is suspicious.
- Digital Signature:: Right-click the file in its folder -> Properties -> Digital Signatures. Should show "Microsoft Corporation" as the signer.
- Resource Usage:: Normal usage is 2-15% CPU per active session, 60-180 MB memory. Extremely high usage when idle is suspicious.
- Behavior:: pwsh-preview.exe should run when you start a Preview session or invoke preview features. Unprompted network activity or background tasks are red flags.
Red Flags: If pwsh-preview.exe is found outside the PowerShell folders (e.g., System32, Temp) or lacks a valid signature, or runs without user action, scan for malware.
Why Is pwsh-preview.exe Running on My PC?
pwsh-preview.exe runs when you start a PowerShell Preview session or when a script uses preview features that require the preview engine.
Reasons it's running:
- Active PowerShell Preview Use: You opened a PowerShell Preview session or executed a script requiring preview cmdlets
- Background Jobs or Tasks: Preview modules may initiate background jobs or scheduled tasks for asynchronous operations
- Remoting Sessions: Administrative remoting or remote script execution can spawn dedicated pwsh-preview processes
- Startup or Auto-Launch: Preview components may be configured to launch at user login or system startup
- Module and Feature Loading: Preview modules and experimental features load on demand, creating additional processes
Can I Disable or Remove pwsh-preview.exe?
Yes, you can disable pwsh-preview. Disabling stops preview features from loading and will prevent you from using experimental cmdlets. You can remove the preview build if you prefer the stable PowerShell (pwsh.exe).
How to Stop pwsh-preview
- End Active Preview Sessions: Exit all PowerShell Preview windows or run Exit in each session
- Disable Startup: Task Manager > Startup tab > disable PowerShell Preview
- Stop Background Jobs: In a preview session, run Get-Job | Remove-Job to terminate background tasks
- Disable Preview Features: In PowerShell Preview settings or profile, disable automatic loading of preview modules
- Uninstall Preview Build: Settings > Apps > Apps & Features > PowerShell Preview > Uninstall
How to Uninstall pwsh-preview
- ✔ Windows Settings -> Apps -> Apps & Features -> PowerShell Preview -> Uninstall
- ✔ If not listed, use the official installer removal or the package manager you used (e.g., MSI uninstall)
- ✔ Consider removing preview modules from your PSModulePath and using the stable pwsh.exe for daily use
Common Problems: High CPU or Memory Usage
If pwsh-preview.exe is consuming excessive resources or behaving unexpectedly, try the following targeted steps.
Common Causes & Solutions
- Heavy Preview Modules Loaded: Unload or limit preview modules; only load what you need in a session
- Long-Running Preview Scripts: Review scripts for infinite loops or excessive I/O; add timeouts where possible
- Multiple Preview Sessions: Close extra preview windows; consolidate tasks into fewer sessions
- Background Jobs Not Cleaning Up: Explicitly stop and Remove-Job; audit background tasks regularly
- Remoting Sessions Left Open: Close or terminate remote sessions; use Enter-PSSession/Exit-PSSession carefully
- Preview Build Bugs: Update to a newer preview or revert to stable pwsh.exe until fixed
Quick Fixes:
1. Quick Fixes:
2. 1. Open a PowerShell Preview Task Manager view and identify high-usage sessions
3. 2. Clear unused modules and profiles that load during startup
4. 3. Reduce loaded modules and scripts; avoid running heavy preview modules simultaneously
5. 4. Update to the latest preview build
6. 5. Consider enabling Memory Saver or limiting background jobs
Frequently Asked Questions
Is pwsh-preview.exe safe?
Yes, pwsh-preview.exe is safe when obtained from official Microsoft channels (GitHub PowerShell releases or the Microsoft Store) and located in the proper PowerShell folders.
How do I update pwsh-preview?
To update, use the official PowerShell Preview release channel (GitHub releases or Microsoft Store). You can also install newer preview builds and keep the stable pwsh.exe unaffected.
Can I run pwsh-preview side-by-side with pwsh.exe?
Yes. You can run pwsh-preview side-by-side with pwsh.exe. They are separate binaries; use pwsh-preview for testing while pwsh.exe remains stable for daily use.
Why is pwsh-preview.exe running at startup?
pwsh-preview.exe may run at startup if you installed a preview that auto-launches. Disable startup in Task Manager > Startup or uninstall the preview build.
How do I uninstall pwsh-preview?
Uninstall pwsh-preview via Settings > Apps > Apps & Features > PowerShell Preview > Uninstall. Then reinstall only the stable pwsh.exe if you need PowerShell without previews.
What is the purpose of pwsh-preview.exe?
pwsh-preview is intended for testing new features. Use it for development and testing; for daily workflows, rely on the stable pwsh.exe to avoid preview-related issues.