Ricochet

Ricochet

by Valve Corporation

What is Ricochet?

Ricochet is software application developed by Valve Corporation. It is most commonly found on computers running Windows 7 with nearly 56.83% of installations running this operating system. Ricochet's installer is typically 12.00 MB in size and installs around 61 files.

Ricochet is most popular in the United States with 58.82% of installations residing in this country.

Ricochet adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Ricochet is known to create 5 firewall exceptions to allow inbound and outbound connectivity.

Software Behaviors

Firewall:
  • hl.exe is added as a firewall exception for 'C:\Programe\Steam\steamapps\common\Half-Life\hl.exe'.
  • Steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hltv.exe is added as a firewall exception for 'C:\Niku\Games\Steam\SteamApps\common\Half-Life\hltv.exe'.
  • SteamTmp.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hlds.exe is added as a firewall exception for 'C:\Program Files\Steam\SteamApps\common\Half-Life\hlds.exe'.
Scheduled tasks:
  • Steam.exe is scheduled as a task with the class '{F379847F-E7EF-4084-9B2F-B87B28202FA4}' (runs on registration).
  • hl.exe is scheduled as a task with the class '{9B9E38FA-7DA3-426A-B7F1-26A18C16F531}' (runs on registration).
  • hlds.exe is scheduled as a task with the class '{424AB74C-911C-4999-BEE9-8A91BA9EA944}' (runs on registration).
  • GameOverlayUI.exe is scheduled as a task with the class '{98D22EE8-FBCE-4B0A-A638-4A27C81582F5}' (runs on registration).
  • SteamTmp.exe is scheduled as a task with the class '{0FA4F2B3-5879-4EB7-87D7-15A36952D352}' (runs on registration).

Startup Entries

Startup tasks:
  • Steam.exe is automatically launched at startup through a scheduled task named Steam.
Registry entries:
  • Steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam.exe' and executes as C:\Program Files\steam\steam.exe.
  • SteamTmp.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.

Software Details

URL:
https://www.steampowered.com
Support:
https://support.steampowered.com
Installation path:
C:\Program Files\steam\steamapps\harrihuta\ricochet
Uninstaller:
"C:\Program Files\Steam\steam.exe" steaC://uninstall/60
Size:
12.00 MB
Language:
English

Ricochet Executable Details

Primary executable:
SDL2.dll
Name:
Ricochet
Path:
C:\Program Files\steam\steamapps\harrihuta\ricochet\SDL2.dll
MD5:
8b5e5e0a4ede5ca97f10a4e198e843c2
SHA-1:
SHA-256:
Files installed by Ricochet
File Type Filename MD5
DLL
173c217e677c4b0c4f8a6d54ba13bf9b
DLL
c18caa9ba4f06a5d226a892df6dc1d72
DLL
52a41f0e49b2208df75609699fc7254c
DLL
a7532e66ea2f168a0970e829d8986423
DLL
f293d94beaf54f091e400363c689e1b4
DLL
f987a8ebcf7e616f64efddbbc7faf169
DLL
2db14d7b6400a4abd74cf85f2106ee9c
DLL
045d0f4f41ca53d4cb22bdc814a22b64
DLL
60be2cec0d95bb135d4452f39aac6805
DLL
bba1fe328cea501fcce1e5df16276439