In June 2020, Microsoft pulled RDCMan from its download center after a security researcher found a flaw where a malicious .rdg file could lead to remote code execution. That’s when finding a clean became a scavenger hunt.