---
id: 6437
title: "A problem with .NET Self-Contained Apps and how to pop calculators in dnSpy"
source_domain: blog.washi.dev
source_url: "https://blog.washi.dev/posts/popping-calcs-in-dnspy/"
published_at: "2023-09-23T00:00:00Z"
tags: ["reverse-engineering", "vulnerability", "tools", "dotnet", "dnspy", "dll-hijack"]
phying_url: "https://phying.com/item/6437"
lang: en
---

# A problem with .NET Self-Contained Apps and how to pop calculators in dnSpy

## Summary

Reveals a critical bug in dnSpy 6.1.8–6.4.0 that allowed arbitrary code execution via DLL hijacking when opening .NET self-contained apps; details the investigation and the dnSpyEx 6.4.1 fix.

## Intelligence Metadata

- **Sources:** blog.washi.dev
- **Published:** 2023-09-23T00:00:00Z
- **Original:** https://blog.washi.dev/posts/popping-calcs-in-dnspy/
- **Phying News:** https://phying.com/item/6437