diff --git a/README.md b/README.md
index 2f4305d9..00041338 100644
--- a/README.md
+++ b/README.md
@@ -45,6 +45,8 @@ Test firmware / live system
 -e [./path]       Exclude paths from testing (multiple usage possible)
 -m [MODULE_NO.]   Test only with set modules [e.g. -m 05 -m 10 ... ] (multiple usage possible)
 -c                Enable cwe-checker
+-E                Enable automated qemu emulation tests (WARNING this module could harm your host!)
+
 
 Dependency check
 -d                Only check dependencies
@@ -123,6 +125,7 @@ For using _emba_ with all features, you will need following tools on your __Kali
 - `Option: shellcheck`
 - `Option: docker`
 - `Option: yara`
+- `Option: qemu static user mode emulators`
 
 To check these dependencies, only run `sudo ./emba.sh -d`
 
diff --git a/documentation/emba_03.png b/documentation/emba_03.png
index 023a96b6..bd4cf74a 100644
Binary files a/documentation/emba_03.png and b/documentation/emba_03.png differ
diff --git a/emba.sh b/emba.sh
index ea63c6ca..baa39ac6 100755
--- a/emba.sh
+++ b/emba.sh
@@ -63,6 +63,7 @@ main()
   export SHORT_PATH=0           # short paths in cli output
   export ONLY_DEP=0             # test only dependency
   export FORCE=0
+  export QEMULATION=0
 
   export LOG_DIR="./logs"
   export CONFIG_DIR="./config"
@@ -85,7 +86,7 @@ main()
     exit 1
   fi
 
-  while getopts a:A:cde:f:Fhk:l:m:psvz OPT ; do
+  while getopts a:A:cde:Ef:Fhk:l:m:psvz OPT ; do
     case $OPT in
       a)
         export ARCH="$OPTARG"
@@ -104,6 +105,9 @@ main()
       e)
         export EXCLUDE=("${EXCLUDE[@]}" "$OPTARG")
         ;;
+      E)
+        export QEMULATION=1
+        ;;
       f)
         export FIRMWARE=1
         export FIRMWARE_PATH="$OPTARG"
diff --git a/helpers/print.sh b/helpers/print.sh
index a11fd5fc..74f6eb2d 100644
--- a/helpers/print.sh
+++ b/helpers/print.sh
@@ -270,6 +270,7 @@ print_help()
   echo -e "$CYAN""-e [./path]""$NC""       Exclude paths from testing (multiple usage possible)"
   echo -e "$CYAN""-m [MODULE_NO.]""$NC""   Test only with set modules [e.g. -m 05 -m 10 ... ]] (multiple usage possible)"
   echo -e "$CYAN""-c""$NC""                Enable cwe-checker"
+  echo -e "$CYAN""-E""$NC""                Enable automated qemu emulation tests (WARNING this module could harm your host!)"
   echo -e "\\nDependency check"
   echo -e "$CYAN""-d""$NC""                Only check dependencies"
   echo -e "$CYAN""-F""$NC""                Check dependencies but ignore errors"
diff --git a/installer.sh b/installer.sh
index f378d9c4..c500df55 100755
--- a/installer.sh
+++ b/installer.sh
@@ -35,6 +35,7 @@ apt-get install shellcheck -y
 apt-get install device-tree-compiler -y
 apt-get install docker.io -y
 apt-get install unzip -y
+apt-get install qemu-user-static -y
 
 
 if ! [[ -d "external" ]] ; then
diff --git a/modules/S115_usermode_emulator.sh b/modules/S115_usermode_emulator.sh
new file mode 100644
index 00000000..237816a3
--- /dev/null
+++ b/modules/S115_usermode_emulator.sh
@@ -0,0 +1,201 @@
+#!/bin/bash
+
+# emba - EMBEDDED LINUX ANALYZER
+#
+# Copyright 2020 Siemens Energy AG
+#
+# emba comes with ABSOLUTELY NO WARRANTY. This is free software, and you are
+# welcome to redistribute it under the terms of the GNU General Public License.
+# See LICENSE file for usage of this software.
+#
+# emba is licensed under GPLv3
+#
+# Author(s): Michael Messner, Pascal Eckmann
+
+# Description:  Module with all available functions and patterns to use
+#               Access:
+#                 firmware root path via $FIRMWARE_PATH
+#                 binary array via ${BINARIES[@]}
+
+S115_usermode_emulator() {
+  module_log_init "usermode_emulator"
+  module_title "Trying to emulate binaries via qemu usermode emulator"
+
+  print_output "[!] This module is experimental and could harm your host environment.\\n"
+
+  if [[ "$QEMULATION" -eq 1 ]]; then
+    SHORT_PATH_BAK=$SHORT_PATH
+    SHORT_PATH=1
+
+    for LINE in "${BINARIES[@]}" ; do
+      if ( file "$LINE" | grep -q ELF ) && [[ "$LINE" != './qemu-'*'-static' ]]; then
+        if ( file "$LINE" | grep -q "x86-64" ) ; then
+          EMULATOR="qemu-x86_64-static"
+        elif ( file "$LINE" | grep -q "Intel 80386" ) ; then
+          EMULATOR="qemu-i386-static"
+        elif ( file "$LINE" | grep -q "32-bit LSB.*ARM" ) ; then
+          EMULATOR="qemu-arm-static"
+        elif ( file "$LINE" | grep -q "32-bit MSB.*ARM" ) ; then
+          EMULATOR="qemu-armeb-static"
+        elif ( file "$LINE" | grep -q "32-bit LSB.*MIPS" ) ; then
+          EMULATOR="qemu-mipsel-static"
+        elif ( file "$LINE" | grep -q "32-bit MSB.*MIPS" ) ; then
+          EMULATOR="qemu-mips-static"
+        elif ( file "$LINE" | grep -q "32-bit MSB.*PowerPC" ) ; then
+          EMULATOR="qemu-ppc-static"
+        else
+          print_output "[-] No working emulator found for ""$LINE"
+          EMULATOR="NA"
+        fi
+
+        if [[ "$EMULATOR" != "NA" ]]; then
+          prepare_emulator
+          emulate_binary
+        fi
+        running_jobs
+      fi
+    done
+
+    cleanup
+    running_jobs
+
+  else
+    print_output "[-] Automated emulation is disabled."
+    print_output "$(indent "Enable it with the parameter -E.")"
+  fi
+}
+
+running_jobs() {
+  CJOBS=$(pgrep -a "$EMULATOR")
+  if [[ -n "$CJOBS" ]] ; then
+    echo
+    print_output "[*] Currently running emulation jobs: $(echo "$CJOBS" | wc -l)"
+    print_output "$(indent "$CJOBS")""\\n"
+  else
+    CJOBS="NA"
+  fi
+}
+
+cleanup() {
+  print_output "[*] Terminating qemu processes - check it with ps"
+  mapfile -t CJOBS < <(pgrep qemu-)
+  for PID in "${CJOBS[@]}"; do
+    print_output "[*] Terminating process ""$PID"
+    kill "$PID" 2> /dev/null
+  done
+
+  CJOBS_=$(pgrep qemu-)
+  if [[ -n "$CJOBS_" ]] ; then
+    print_output "[*] More emulation jobs are running ... we kill it with fire\\n"
+    killall -9 "$EMULATOR" 2> /dev/null
+  fi
+
+  EMULATORS_=( qemu*static )
+  if (( ${#EMULATORS_[@]} )) ; then
+    print_output "[*] Cleaning the emulation environment\\n"
+    rm "$FIRMWARE_PATH"/qemu*static 2> /dev/null
+  fi
+
+  echo
+  print_output "[*] Umounting proc, sys and run"
+  umount -l "$FIRMWARE_PATH""/proc"
+  umount "$FIRMWARE_PATH""/sys"
+  umount "$FIRMWARE_PATH""/run"
+
+  FILES=$(find "$LOG_DIR""/qemu_emulator/" -type f -name "qemu_*")
+  if [[ -n "$FILES" ]] ; then
+    print_output "[*] Cleanup empty log files.\\n"
+    for FILE in $FILES ; do
+      if [[ ! -s "$FILE" ]] ; then
+        rm "$FILE" 2> /dev/null
+      else
+        BIN=$(basename "$FILE")
+        BIN=$(echo "$BIN" | cut -d_ -f2 | sed 's/.txt$//')
+        print_output "[+]""${NC}"" Emulated binary ""${GREEN}""$BIN""${NC}"" generated output in ""${GREEN}""$FILE""${NC}"". Please check this manually."
+      fi
+    done
+  fi
+  SHORT_PATH=$SHORT_PATH_BAK
+}
+
+prepare_emulator() {
+  if [[ ! -f "$FIRMWARE_PATH""/""$EMULATOR" ]]; then
+    print_output "[*] Preparing the environment for usermode emulation"
+    cp "$(which $EMULATOR)" "$FIRMWARE_PATH"
+
+    if ! [[ -d "$FIRMWARE_PATH""/proc" ]] ; then
+      mkdir "$FIRMWARE_PATH""/proc" 2> /dev/null
+    fi
+
+    if ! [[ -d "$FIRMWARE_PATH""/sys" ]] ; then
+      mkdir "$FIRMWARE_PATH""/sys" 2> /dev/null
+    fi
+
+    if ! [[ -d "$FIRMWARE_PATH""/run" ]] ; then
+      mkdir "$FIRMWARE_PATH""/run" 2> /dev/null
+    fi
+
+    if ! [[ -d "$FIRMWARE_PATH""/dev/" ]] ; then
+      mkdir "$FIRMWARE_PATH""/dev/" 2> /dev/null
+    fi
+
+    mount proc "$FIRMWARE_PATH""/proc" -t proc 2> /dev/null
+    mount -o bind /run "$FIRMWARE_PATH""/run" 2> /dev/null
+    mount -o bind /sys "$FIRMWARE_PATH""/sys" 2> /dev/null
+
+    if [[ -e "$FIRMWARE_PATH""/dev/console" ]] ; then
+      rm "$FIRMWARE_PATH""/dev/console" 2> /dev/null
+    fi
+    mknod -m 622 "$FIRMWARE_PATH""/dev/console" c 5 1 2> /dev/null
+
+    if [[ -e "$FIRMWARE_PATH""/dev/null" ]] ; then
+      rm "$FIRMWARE_PATH""/dev/null" 2> /dev/null
+    fi
+    mknod -m 666 "$FIRMWARE_PATH""/dev/null" c 1 3 2> /dev/null
+
+    if [[ -e "$FIRMWARE_PATH""/dev/zero" ]] ; then
+      rm "$FIRMWARE_PATH""/dev/zero" 2> /dev/null
+    fi
+    mknod -m 666 "$FIRMWARE_PATH""/dev/zero" c 1 5 2> /dev/null
+
+    if [[ -e "$FIRMWARE_PATH""/dev/ptmx" ]] ; then
+      rm "$FIRMWARE_PATH""/dev/ptmx" 2> /dev/null
+    fi
+    mknod -m 666 "$FIRMWARE_PATH""/dev/ptmx" c 5 2 2> /dev/null
+
+    if [[ -e "$FIRMWARE_PATH""/dev/tty" ]] ; then
+      rm "$FIRMWARE_PATH""/dev/tty" 2> /dev/null
+    fi
+    mknod -m 666 "$FIRMWARE_PATH""/dev/tty" c 5 0 2> /dev/null
+
+    if [[ -e "$FIRMWARE_PATH""/dev/random" ]] ; then
+      rm "$FIRMWARE_PATH""/dev/random" 2> /dev/null
+    fi
+    mknod -m 444 "$FIRMWARE_PATH""/dev/random" c 1 8 2> /dev/null
+
+    if [[ -e "$FIRMWARE_PATH""/dev/urandom" ]] ; then
+      rm "$FIRMWARE_PATH""/dev/urandom" 2> /dev/null
+    fi
+    mknod -m 444 "$FIRMWARE_PATH""/dev/urandom" c 1 9 2> /dev/null
+
+    chown -v root:tty "$FIRMWARE_PATH""/dev/"{console,ptmx,tty} > /dev/null 2>&1
+
+    print_output ""
+    print_output "[*] Currently mounted areas:"
+    print_output "$(indent "$(mount | grep "$FIRMWARE_PATH" 2> /dev/null )")""\\n"
+
+  fi
+  if ! [[ -d "$LOG_DIR""/qemu_emulator" ]] ; then
+    mkdir "$LOG_DIR""/qemu_emulator" 2> /dev/null
+  fi
+}
+
+emulate_binary() {
+  print_output "[*] Trying to emulate binary ""$(print_path "$LINE")""$LINE"
+  BIN_EMU="$(cut_path "$LINE")"
+  BIN_EMU_NAME="$(basename "$LINE")"
+  chroot "$FIRMWARE_PATH" ./"$EMULATOR" "$BIN_EMU" | tee -a "$LOG_DIR""/qemu_emulator/qemu_""$BIN_EMU_NAME"".txt" 2>&1 &
+  print_output ""
+  print_output "[*] Emulating ""$BIN_EMU"" ... \\n"
+}
+