The suffixes should be exe, com, js, hta, vbs, and so on, for extra evilness.
Exe-files has much bigger impact and can be run through emulation on non-Windows systems.
I'd say exe is a much better choice.
And yes, there are users who click on executables carelessly, but those aren't scared by url-parts.