Scambaiting Question

The scenario:

Let’s say I have a shared folder on a cloud drive somewhere. Inside this folder there is an innocuous “bank_passwords.txt” or whatever the scammer wants to get a hold of, but also there is an executable, say “PayPal.exe”. I tell the scammer NOT to download this executable (which is actually homebrew malware) because I left my payment info in there and it has over $1000. See, I meant to delete it earlier after I shared it with my friend, but I forgot. Scammer takes it anyway and gets a nasty surprise (use your imagination).

My questions are as follows:
1. Does this count as malware distribution? I.e. Is this legal?
2. Are scammers dumb enough follow suspicious links and download shiny looking executables?

All due respect, the post is following the rules:

Rule 11: “We do not allow any kind of illegal activity on the website, though you may still talk about such things, just don’t use the site for participating in such things.” (Emphasis added)

It was never my intention to promote illegal activity or participate in anything illegal. The situation as outlined above is purely hypothetical. I just had the two questions. In fact, the whole reason I had the first question at all was because I *don't* want to break any laws, otherwise I would not have asked at all and just gone ahead and done it.

I am looking for information on what to say when I call. The current “I just got disconnected” isn’t really working anymore. I need some advice.