joeloquer This is a ransomware PoC I wrote in C#. Includes persistence and sending home info. Coldcuts.php is the collector of keys and IP's. whatsmyip.php is, well, the ip address get'er.