000026858 - Why does an extracted file appear as *.raw.exe in RSA Security Analytics?

Extracting files from sessions via the RSA Security Analytics Investigation UI produces files with file name *.raw.exe, e.g. 33525512115-9-0.raw.exe.

This is because raw.exe is a placeholder name for when an exe is identified within a session but no discernible filename is present.

For instance, the data channel session of FTP would contain just the file transfer but not the file name (which would be in the control channel session).