WinRAR's expired trial notification can be used for remote code execution via MitM
https://www.exploit-db.com/exploits/38361/