Remove personally identifiable information from Windows dump files such as the C:\Windows\Memory.dmp file

What are some good programs or methods for removing personally identifiable information (such as usernames, names, passwords, etc.) from Windows dump files such as the C:\Windows\Memory.dmp file?

I would like to share these dump files in places like Experts Exchange but would first like to remove most (preferably all) personally identifiable information.
IT GuyNetwork EngineerAsked:
Who is Participating?
 
JohnBusiness Consultant (Owner)Commented:
Ultra Edit is about the best tool for this. It is an excellent Text Editor and can open a file with 8-bit characters in HEX easily. I use it to review DMP files.
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
Because those dumps are just "arbitrary" extracts from memory, there isn't much which can be done but simple pattern matches and replacements. You would have to know what text exactly you want to remove, because no program can know.
IMHO it's not worth the effort. A mini dump does not contain enough of info usually to identify anyone or anything not related to OS.
0
 
McKnifeCommented:
K., a crash dump does not hold such info. Only a full memory dump would - and that, you wouldn't want to upload, since it's too large for ee's quota policy.
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
JohnBusiness Consultant (Owner)Commented:
In another post about this issue, an expert suggested that mini-dumps contain personally identifiable information .  Maybe they. I have not ever seen any in years of looking at mini-dumps here.

So you have nothing to worry about.

Open your DMP file with a HEX editor before you upload it and review it.
1
 
IT GuyNetwork EngineerAuthor Commented:
What are some good HEX editors and other programs that can be used to view MEMORY.DMP files?
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
https://mh-nexus.de/en/hxd/ is a simple, free and good hex editor.
0
 
JohnBusiness Consultant (Owner)Commented:
Thank you and good luck with reviewing DMP files
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.