Ricochet

Ricochet

by Valve Corporation

What is Ricochet?

Ricochet is software application developed by Valve Corporation. It is most commonly found on computers running Windows 7 with nearly 56.83% of installations running this operating system. Ricochet's installer is typically 12.00 MB in size and installs around 61 files.

Ricochet is most popular in the United States with 58.82% of installations residing in this country.

Ricochet adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Ricochet is known to create 5 firewall exceptions to allow inbound and outbound connectivity.

Software Behaviors

Firewall:
  • hl.exe is added as a firewall exception for 'C:\Programe\Steam\steamapps\common\Half-Life\hl.exe'.
  • Steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hltv.exe is added as a firewall exception for 'C:\Niku\Games\Steam\SteamApps\common\Half-Life\hltv.exe'.
  • SteamTmp.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hlds.exe is added as a firewall exception for 'C:\Program Files\Steam\SteamApps\common\Half-Life\hlds.exe'.
Scheduled tasks:
  • Steam.exe is scheduled as a task with the class '{F379847F-E7EF-4084-9B2F-B87B28202FA4}' (runs on registration).
  • hl.exe is scheduled as a task with the class '{9B9E38FA-7DA3-426A-B7F1-26A18C16F531}' (runs on registration).
  • hlds.exe is scheduled as a task with the class '{424AB74C-911C-4999-BEE9-8A91BA9EA944}' (runs on registration).
  • GameOverlayUI.exe is scheduled as a task with the class '{98D22EE8-FBCE-4B0A-A638-4A27C81582F5}' (runs on registration).
  • SteamTmp.exe is scheduled as a task with the class '{0FA4F2B3-5879-4EB7-87D7-15A36952D352}' (runs on registration).

Startup Entries

Startup tasks:
  • Steam.exe is automatically launched at startup through a scheduled task named Steam.
Registry entries:
  • Steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam.exe' and executes as C:\Program Files\steam\steam.exe.
  • SteamTmp.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.

Software Details

URL:
https://www.steampowered.com
Support:
https://support.steampowered.com
Installation path:
C:\Program Files\steam\steamapps\harrihuta\ricochet
Uninstaller:
"C:\Program Files\Steam\steam.exe" steaC://uninstall/60
Size:
12.00 MB
Language:
English

Ricochet Executable Details

Primary executable:
SDL2.dll
Name:
Ricochet
Path:
C:\Program Files\steam\steamapps\harrihuta\ricochet\SDL2.dll
MD5:
8b5e5e0a4ede5ca97f10a4e198e843c2
SHA-1:
SHA-256:
Files installed by Ricochet
File Type Filename MD5
DLL
c5ccb86cd745746b9908031a54315f90
DLL
42b4b441b49b0200c0c9d8805ea83571
DLL
a3228b7cb5d4d3ba572748a3da0017c7
DLL
fcf83a56983df4951db0d3ae49709b36
DLL
42a23df96dbdaec5caf8164d99a0b93c
DLL
0b3f04a2757f5e43140ac81db1afdc42
DLL
43d2a3b6f8125842e6ea136897493af4
DLL
0833126204df0583bd8b8004163f922a
DLL
bdc5238414662c3b1fb0304a632e524c
DLL
13b853b53a6e0512bd55e007e7992a9e