Ricochet

Ricochet

by Valve Corporation

What is Ricochet?

Ricochet is software application developed by Valve Corporation. It is most commonly found on computers running Windows 7 with nearly 56.83% of installations running this operating system. Ricochet's installer is typically 12.00 MB in size and installs around 61 files.

Ricochet is most popular in the United States with 58.82% of installations residing in this country.

Ricochet adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Ricochet is known to create 5 firewall exceptions to allow inbound and outbound connectivity.

Software Behaviors

Firewall:
  • hl.exe is added as a firewall exception for 'C:\Programe\Steam\steamapps\common\Half-Life\hl.exe'.
  • Steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hltv.exe is added as a firewall exception for 'C:\Niku\Games\Steam\SteamApps\common\Half-Life\hltv.exe'.
  • SteamTmp.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hlds.exe is added as a firewall exception for 'C:\Program Files\Steam\SteamApps\common\Half-Life\hlds.exe'.
Scheduled tasks:
  • Steam.exe is scheduled as a task with the class '{F379847F-E7EF-4084-9B2F-B87B28202FA4}' (runs on registration).
  • hl.exe is scheduled as a task with the class '{9B9E38FA-7DA3-426A-B7F1-26A18C16F531}' (runs on registration).
  • hlds.exe is scheduled as a task with the class '{424AB74C-911C-4999-BEE9-8A91BA9EA944}' (runs on registration).
  • GameOverlayUI.exe is scheduled as a task with the class '{98D22EE8-FBCE-4B0A-A638-4A27C81582F5}' (runs on registration).
  • SteamTmp.exe is scheduled as a task with the class '{0FA4F2B3-5879-4EB7-87D7-15A36952D352}' (runs on registration).

Startup Entries

Startup tasks:
  • Steam.exe is automatically launched at startup through a scheduled task named Steam.
Registry entries:
  • Steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam.exe' and executes as C:\Program Files\steam\steam.exe.
  • SteamTmp.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.

Software Details

URL:
https://www.steampowered.com
Support:
https://support.steampowered.com
Installation path:
C:\Program Files\steam\steamapps\harrihuta\ricochet
Uninstaller:
"C:\Program Files\Steam\steam.exe" steaC://uninstall/60
Size:
12.00 MB
Language:
English

Ricochet Executable Details

Primary executable:
SDL2.dll
Name:
Ricochet
Path:
C:\Program Files\steam\steamapps\harrihuta\ricochet\SDL2.dll
MD5:
8b5e5e0a4ede5ca97f10a4e198e843c2
SHA-1:
SHA-256:
Files installed by Ricochet
File Type Filename MD5
EXE
2098ccf443433129b556c2849fe99e26
EXE
bee0aa5f2822bacc9069eec563f93e5f
EXE
1f524f409dd7dce0e579d0d38c610b6d
DLL
3b6460a5604317b1bfacdd6ab1a58f87
DLL
cbf28ab5ffe69d369c21550292fa3497
DLL
fa11b8cf4197e8de4a9e04f97bc1b159
DLL
a35aa6087c18c9ef5ca3f46d63ca2671
DLL
b542c04c06fed33812ac0a0ebd8ec88e
DLL
4cbd03f4c6da4cb5c0a619579a16bc19
DLL
86660114a3823dd4f2960fe1ab92123d