Superfetch (SysMain) Service Defaults in Windows 10

Maintains and improves system performance over time.

Default Settings

Startup type:Automatic
Display name:Superfetch
Service name:SysMain
Service type:share
Error control:ignore
Object:LocalSystem
Path:%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
File:%SystemRoot%\system32\sysmain.dll
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMain
Privileges:
  • SeTcbPrivilege
  • SeProfileSingleProcessPrivilege
  • SeTakeOwnershipPrivilege
  • SeDebugPrivilege
  • SeIncreaseBasePriorityPrivilege

Default Behavior

Superfetch is a Win32 service. In Windows 10 it is starting automatically when the operating system starts. Then the Superfetch service is running as LocalSystem in a shared process of svchost.exe along with other services. If Superfetch fails to load or initialize, Windows 10 start up proceeds without warnings. However the error details are being logged.

Dependencies

Superfetch cannot be started under any conditions, if the following services are disabled, deleted or working improperly:

Restore Default Startup Configuration for Superfetch

1. Select your Windows 10 edition and release, and then click Download.

2. Save the Win10_SysMain_Service_Startup.cmd file to a local storage device.

3. Run the saved file as an administrator.

4. Restart the computer.

The SysMain service is using the sysmain.dll file that is located in the %WinDir%\system32 folder. If the file is changed, damaged or deleted, you can restore its original version from Windows 10 installation media.