If File Explorer is set to display hidden files, you may have noticed a hidden $SysReset folder on the C:\ drive. What does this folder contain, and is it safe to delete?
Windows creates the $SysReset folder when you perform a System Refresh or Reset on your Windows 10 computer. This folder contains information ranging from log files to migration XML documents, all of which provide useful information to a forensic investigator.
This $SysReset folder also contains an additional folder called Logs which contains a .etl file. It also creates a .etl file of a different name (sysreset_exe_BootUX.etl) inside C:\Recovery\Logs which can help a user to find and collect the report and error.
Using this report you can try troubleshooting steps to identify why the Reset operation may have failed.
Here is the contents of the SysReset folder.
Folder PATH listing
C:\$SYSRESET
├───CloudImage
├───Logs
│ PushButtonReset.etl
│ SessionID.xml
│ setupact.log
│ setuperr.log
│ Timestamp.xml
│
├───MDM
├───OldOS
└───ScratchIf you don’t intend to utilize the logged information in the $SysReset folder, you may safely delete the folder.