If you want to validate that the user passes an "EXE" file, check the file extension.
If you want to validate that the user passes a runnable EXE file (regardless of extension), check the first two bytes of the file. They should contain the value "MZ".