From Collaborative RCE Tool Library

Jump to: navigation, search


Tool name: Strings2
Rating: 0.0 (0 votes)
Author: Geoff McDonald                        
Current version: v1.2
Last updated: April 21, 2013
Direct D/L link:
License type: Freeware
Description: Strings2 is a Windows command-line tool for extracting ascii and unicode strings from binary data. On top of the classical Sysinternals strings approach, this improved version is also able to dump strings from process address spaces and also reconstructs hidden assembly local variable assignment ascii/unicode strings.

The Windows 64 bit binary is available here:

and the Windows 32 bit binary is available here:

Example Usage:
strings2 malware.exe
strings2 *.exe > strings.txt
strings2 *.exe -nh -f -t -asm > strings.txt
strings2 -pid 419 > process_strings.txt
strings2 -pid 0x1a3 > process_strings.txt
strings2 -system > all_process_strings.txt
cat abcd.exe | strings2 > out.txt
Related URLs:
Source code:

Screenshot of Strings2

RSS feed Feed containing all updates for this tool.

You are welcome to add your own useful notes about this tool, for others to see!

If you find that any information for the tool above is missing, outdated or incorrect, please edit it!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)

Category Navigation Tree
   Code Coverage Tools  (13)
   Code Ripping Tools  (2)
   Helper Tools  (3)
   Hex Editors  (13)
   Memory Patchers  (7)
   Packers  (20)
   Profiler Tools  (11)
   String Finders  (10)
   Tool Hiding Tools  (7)
   Tracers  (22)
   Needs New Category  (3)