# Virtualized Loader

Published articles for Virtualized Loader.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Centurion: A Virtualized Loader for Malware Evasion

DevFeed: [Centurion: A Virtualized Loader for Malware Evasion](<https://devfeed.tech/articles/centurion-bring-your-own-execution-environment-51392.md>)

Original publisher: [Read original article](<https://www.praetorian.com/blog/virtualized-loader-centurion/>)

Author: Michelle Rhodes

Published: 2026-06-09T19:14:27Z

Content type: article

Language: en

Sources: [Praetorian](<https://devfeed.tech/sources/praetorian.md>)

Topics: [virtualization](<https://devfeed.tech/topics/virtualization.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [obfuscation](<https://devfeed.tech/topics/obfuscation.md>), [Compiler](<https://devfeed.tech/topics/compiler.md>), [LLVM](<https://devfeed.tech/topics/llvm.md>), [RISC-V](<https://devfeed.tech/topics/riscv.md>)

Tags: [centurion](<https://devfeed.tech/tags/centurion.md>), [clang](<https://devfeed.tech/tags/clang.md>), [compile](<https://devfeed.tech/tags/compile.md>), [compiler](<https://devfeed.tech/tags/compiler.md>), [llm-development](<https://devfeed.tech/tags/llm-development.md>), [llvm](<https://devfeed.tech/tags/llvm.md>), [malware](<https://devfeed.tech/tags/malware.md>), [obfuscation](<https://devfeed.tech/tags/obfuscation.md>), [offensive-security](<https://devfeed.tech/tags/offensive-security.md>), [red-team](<https://devfeed.tech/tags/red-team.md>), [security-insights](<https://devfeed.tech/tags/security-insights.md>), [tools-techniques](<https://devfeed.tech/tags/tools-techniques.md>), [virtual](<https://devfeed.tech/tags/virtual.md>), [virtual-machine](<https://devfeed.tech/tags/virtual-machine.md>), [virtualized-loader](<https://devfeed.tech/tags/virtualized-loader.md>), [vulnerability-research](<https://devfeed.tech/tags/vulnerability-research.md>), [wasmforge](<https://devfeed.tech/tags/wasmforge.md>)

### AI overview

The article describes the author's work on Centurion, a virtualized loader intended to make malware analysis harder. It discusses VM-based obfuscation, runtime evasion of modern EDR systems, and related design choices involving interpreters, LLVM, and RISC-V.

### Source excerpt

Writing my own virtualized loader is something I've been wanting to do since I first read Microsoft's deep dive on FinFisher's multi-layered VM obfuscation back in 2018. FinFisher didn't just use one layer of protection, it implemented a custom virtual machine with 32 opcode handlers, wrapped that in spaghetti code and anti-debug checks, and then buried a second VM [...] The post Centurion: Bring Your Own Execution Environment appeared first on Praetorian.