Administrator code execution via writable application binary

Privilege escalation in EaseUS MobiMover 6.0.5 Build 21620 allows local users to execute code with administrator privileges. The Windows installation grants the Users group write access to its bin directory, allowing prepare.exe to be replaced with a crafted executable. A low-privileged user must replace the file before an administrator starts the application, which executes the replacement with administrator privileges.