This can be used for threat hunting. It will look for valid file names that have a double extension that can be used to trick people. Ex: Invoice.pdf.exe