I wanted to test this tool as soon as I saw it. I downloaded the binary from here linked in thedocumenation. https://ci.appveyor.com/project/yck1509/confuserex/build/artifacts.

The source is here: https://github.com/yck1509/ConfuserEx

Normally I like to compile things myself but I’m short on time and I wanted to test this out today! I expanded the zip file on my test machine and ran confuserex.exe.

Next I’m going to select the sharpdump.exe I built previously. If you need to know how to build sharpdump I do a walk through in a previous post here: https://medium.com/@markmotig/research-and-organization-on-the-go-and-refinement-when-time-permits-3d25763d3586

Notice the original SharpDump.exe size is 9kb. I click the + to add rules on the Settings tab and then the edit button to open the next window.

I’m change the preset to aggressive for the global settings (not sure if I have to).

Next I do the same for SharpDump.exe.

I select the protect tab and click “protect”

After a moment it will complete with the path to the NEW EXE!

And the output is 52k the original 9k

Here is the original in ILSPY

Here is what the 52k new exe file looks like in ILSpy. BEAUTIFUL!!!!

And it still works too!!!

Feel free to follow me on twitter https://twitter.com/_markmo_

Cheers and thanks yck1509!!!