Ryuk has been observed to query the registry key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\Language" and the value "InstallLanguage". If the machine has the value 0x419 (Russian), 0x422 (Ukrainian), or 0x423 (Belarusian), it stops execution.