When ransomware infected your machine, the type of ransomware that got the files encrypted can be identified by the extension added to the filename. Also, each ransomware provide a note file under C drive
This repo includes the ransomware extensions and notes files.