Ricochet

Ricochet

by Valve Corporation

What is Ricochet?

Ricochet is software application developed by Valve Corporation. It is most commonly found on computers running Windows 7 with nearly 56.83% of installations running this operating system. Ricochet's installer is typically 12.00 MB in size and installs around 61 files.

Ricochet is most popular in the United States with 58.82% of installations residing in this country.

Ricochet adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Ricochet is known to create 5 firewall exceptions to allow inbound and outbound connectivity.

Software Behaviors

Firewall:
  • hl.exe is added as a firewall exception for 'C:\Programe\Steam\steamapps\common\Half-Life\hl.exe'.
  • Steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hltv.exe is added as a firewall exception for 'C:\Niku\Games\Steam\SteamApps\common\Half-Life\hltv.exe'.
  • SteamTmp.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
  • hlds.exe is added as a firewall exception for 'C:\Program Files\Steam\SteamApps\common\Half-Life\hlds.exe'.
Scheduled tasks:
  • Steam.exe is scheduled as a task with the class '{F379847F-E7EF-4084-9B2F-B87B28202FA4}' (runs on registration).
  • hl.exe is scheduled as a task with the class '{9B9E38FA-7DA3-426A-B7F1-26A18C16F531}' (runs on registration).
  • hlds.exe is scheduled as a task with the class '{424AB74C-911C-4999-BEE9-8A91BA9EA944}' (runs on registration).
  • GameOverlayUI.exe is scheduled as a task with the class '{98D22EE8-FBCE-4B0A-A638-4A27C81582F5}' (runs on registration).
  • SteamTmp.exe is scheduled as a task with the class '{0FA4F2B3-5879-4EB7-87D7-15A36952D352}' (runs on registration).

Startup Entries

Startup tasks:
  • Steam.exe is automatically launched at startup through a scheduled task named Steam.
Registry entries:
  • Steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam.exe' and executes as C:\Program Files\steam\steam.exe.
  • SteamTmp.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.

Software Details

URL:
https://www.steampowered.com
Support:
https://support.steampowered.com
Installation path:
C:\Program Files\steam\steamapps\harrihuta\ricochet
Uninstaller:
"C:\Program Files\Steam\steam.exe" steaC://uninstall/60
Size:
12.00 MB
Language:
English

Ricochet Executable Details

Primary executable:
SDL2.dll
Name:
Ricochet
Path:
C:\Program Files\steam\steamapps\harrihuta\ricochet\SDL2.dll
MD5:
8b5e5e0a4ede5ca97f10a4e198e843c2
SHA-1:
SHA-256:
Files installed by Ricochet
File Type Filename MD5
DLL
91bc6ecb8d841dd4911b983118553d49
DLL
8df4d4324e5755f1a0567db3c5be4c58
DLL
99b5e21dfa5e26e9e1ebbbd7a44a6a66
DLL
18d55998df6a48193499f859f8bfebd9
DLL
6baefb250616105b06438d6742d1ebde
DLL
fba45e993ce862d7c1bc459b66b3f2fc
DLL
3f899c1cf1d9e426e418a12aecfd5595
DLL
8f83e1a2b5d40f34b243347e1b378fdd
DLL
89e01c77c7b4c9bdf8ca91411c60a5d3
DLL
d9605bc4d631cfd03fdb827d9f3e5763