🧰 dnSpy

The items that name it 4

• Awesome Malware Analysis
  repo2026-07-31

  .NET assembly editor, decompiler and debugger

• Dissecting CrashFix: KongTuke's New Toy
  writeup2026-01-16

  .NET decompiler used by analysts to inspect the GateKeeper DLL payload, including enabling 'Show hidden compiler-generated types and methods' to view encrypted data stored in <Module>.<>c.

• ClickFix Gets Creative: Malware Buried in Images
  writeup2025-11-24

  .NET decompiler used by Huntress analysts to inspect and deobfuscate the malicious .NET assemblies

• Botnet Fenix
  writeup2024-08-22

  used to analyze/decompile the .NET malware (process injection routine)