Skip to content

Predator Control v1.3.2 — Security Hardening: Authenticode Verification & User Consent

Choose a tag to compare

View all tags
@YS47 YS47 released this 28 Sep 21:00
· 3 commits to master since this release
v1.3.2
29abbd4

Predator Control v1.3.2 — Security Hardening: Authenticode Verification & User Consent for OEM Services

A dedicated, critical security release hardening the OEM Hardware Service Auto-Repair subsystem against local privilege escalation and unconsented persistence.

🔒 1. Cryptographic Authenticode & Publisher Verification

  • Added native Authenticode trust validation (WinVerifyTrust via wintrust.dll) ensuring that any OEM driver package or service binary has not been tampered with or modified.
  • Added explicit X.509 certificate publisher verification (X509Certificate / X509Certificate2 / X509Chain). Binaries must be published explicitly by Acer Incorporated with a valid chain of trust to a trusted Windows Root Authority.
  • Unsigned binaries, tampered files, or executables signed by unrecognized publishers are immediately rejected and logged.

🛡️ 2. Isolation from User-Writable Directories

  • Removed all search roots derived from the application directory (appDir/oem_drivers and parentOem/oem_drivers).
  • Restricted hardware driver and service discovery strictly to C:\Windows\System32\DriverStore\FileRepository, which requires Administrator/TrustedInstaller privileges to write to.

✋ 3. Explicit User Consent Before Service Registration

  • Registering a new auto-starting Windows service (ASMSvc, AcerDeviceEnablingServiceV2, AcerLightingService) now requires explicit user consent via a one-time confirmation dialog.
  • The confirmation prompt details the exact service display name and verified binary path about to be registered.
  • User decisions are stored in registry (HKCU\SOFTWARE\PredatorControl\Consent_Install_{serviceName}). If the user declines, the installation aborts cleanly with zero partial state left behind.
  • Existing installed services continue to be managed and started transparently without prompting.

📦 Checksums & Verification

dd64d4ec23f7b9954707929ba2bcba2f3b4f4b6511ff71b99fe4c782ff49e459  PredatorControl-standalone.exe
48a33594f62df2f28f1658c88eace1017c8c8dfa12a68ee2f7fdb64b8846e261  PredatorControl-win-x64.exe
Assets 5
Loading