Skiriki,

Your plan of action looks very sensible, and I would be very interested in any results you obtain if you do get a 'suspect' exe to study, whatever the result.

Since you are approaching this in a professional way and intending to investigate first hand, I would be inclined to trust your findings. I think you should be mentally prepared though that some people will not believe your results unless they agree with their pre-concieved ideas on what the answer will be.