I would really love a detailed breakdown of the FSB executable, preferably running on bare metal and from the IP of a likely target country (Ukraine for example). Seeing how RU-intel operates I really wouldn't put it past them to send different payloads depending on who downloads. Especially if they are all generated customly.