Ricochet

Ricochet

by Valve Corporation

What is Ricochet?

Ricochet is software application developed by Valve Corporation. It is most commonly found on computers running Windows 7 with nearly 56.83% of installations running this operating system. Ricochet's installer is typically 12.00 MB in size and installs around 61 files.

Ricochet is most popular in the United States with 58.82% of installations residing in this country.

Ricochet adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Ricochet is known to create 5 firewall exceptions to allow inbound and outbound connectivity.

Software Behaviors

Firewall:
  • hl.exe is added as a firewall exception for 'C:\Programe\Steam\steamapps\common\Half-Life\hl.exe'.
  • Steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hltv.exe is added as a firewall exception for 'C:\Niku\Games\Steam\SteamApps\common\Half-Life\hltv.exe'.
  • SteamTmp.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hlds.exe is added as a firewall exception for 'C:\Program Files\Steam\SteamApps\common\Half-Life\hlds.exe'.
Scheduled tasks:
  • Steam.exe is scheduled as a task with the class '{F379847F-E7EF-4084-9B2F-B87B28202FA4}' (runs on registration).
  • hl.exe is scheduled as a task with the class '{9B9E38FA-7DA3-426A-B7F1-26A18C16F531}' (runs on registration).
  • hlds.exe is scheduled as a task with the class '{424AB74C-911C-4999-BEE9-8A91BA9EA944}' (runs on registration).
  • GameOverlayUI.exe is scheduled as a task with the class '{98D22EE8-FBCE-4B0A-A638-4A27C81582F5}' (runs on registration).
  • SteamTmp.exe is scheduled as a task with the class '{0FA4F2B3-5879-4EB7-87D7-15A36952D352}' (runs on registration).

Startup Entries

Startup tasks:
  • Steam.exe is automatically launched at startup through a scheduled task named Steam.
Registry entries:
  • Steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam.exe' and executes as C:\Program Files\steam\steam.exe.
  • SteamTmp.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.

Software Details

URL:
https://www.steampowered.com
Support:
https://support.steampowered.com
Installation path:
C:\Program Files\steam\steamapps\harrihuta\ricochet
Uninstaller:
"C:\Program Files\Steam\steam.exe" steaC://uninstall/60
Size:
12.00 MB
Language:
English

Ricochet Executable Details

Primary executable:
SDL2.dll
Name:
Ricochet
Path:
C:\Program Files\steam\steamapps\harrihuta\ricochet\SDL2.dll
MD5:
8b5e5e0a4ede5ca97f10a4e198e843c2
SHA-1:
SHA-256:
Files installed by Ricochet
File Type Filename MD5
DLL
8b5e5e0a4ede5ca97f10a4e198e843c2
EXE
413a9b2703257fde51841ca23892bbe7
DLL
5a93fc75efeeece5138ddd7e9fe3cabc
DLL
861b5fc58e15dd144e2c19d852e605f9
DLL
973e5ea227bc1c93959b00175fded657
DLL
e6e31774a857437630ef87adc16f28c2
DLL
de10fc8fded8e07cc85ff645efbfe80a
DLL
0a7143719c36d7dc55bce2ce7a5eae28
EXE
d0413a9e7cf1d6cc61df1d6972cc2b1e
EXE
a5ac34b53d106de5bf5709ebe035c906