Remove personally identifiable information from Windows dump files such as the C:\Windows\Memory.dmp file

What are some good programs or methods for removing personally identifiable information (such as usernames, names, passwords, etc.) from Windows dump files such as the C:\Windows\Memory.dmp file?

I would like to share these dump files in places like Experts Exchange but would first like to remove most (preferably all) personally identifiable information.
IT GuyNetwork EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Qlemo"Batchelor", Developer and EE Topic AdvisorCommented:
Because those dumps are just "arbitrary" extracts from memory, there isn't much which can be done but simple pattern matches and replacements. You would have to know what text exactly you want to remove, because no program can know.
IMHO it's not worth the effort. A mini dump does not contain enough of info usually to identify anyone or anything not related to OS.
0
McKnifeCommented:
K., a crash dump does not hold such info. Only a full memory dump would - and that, you wouldn't want to upload, since it's too large for ee's quota policy.
0
JohnBusiness Consultant (Owner)Commented:
In another post about this issue, an expert suggested that mini-dumps contain personally identifiable information .  Maybe they. I have not ever seen any in years of looking at mini-dumps here.

So you have nothing to worry about.

Open your DMP file with a HEX editor before you upload it and review it.
1
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

IT GuyNetwork EngineerAuthor Commented:
What are some good HEX editors and other programs that can be used to view MEMORY.DMP files?
0
JohnBusiness Consultant (Owner)Commented:
Ultra Edit is about the best tool for this. It is an excellent Text Editor and can open a file with 8-bit characters in HEX easily. I use it to review DMP files.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Qlemo"Batchelor", Developer and EE Topic AdvisorCommented:
https://mh-nexus.de/en/hxd/ is a simple, free and good hex editor.
0
JohnBusiness Consultant (Owner)Commented:
Thank you and good luck with reviewing DMP files
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.