except that's not how it works  since windows xp, windows ignores autorun.inf  so if it's an spi memory device with an .exe it does absolutely nothing but at most mount and require the victim to click it it has to act as a hid device to do anything automatically  and then it wouldnt be an exe
Israel