Is ReSkate Safe? What That Windows Defender Alert Really Means

The short answer

A Defender alert alone does not establish that ReSkate is malware, and this guide cannot certify your download as safe. ReSkate is a community modding client with public source under GPL-3.0. Your decision should depend on where the file came from, whether it matches trusted release information and what the alert actually reports.

If those checks are incomplete, stop before running it. For the setup sequence and supported game build, use our full ReSkate download and install guide.

Why Windows Defender flags ReSkate

A modding client needs to inject into the game process and change game data. Those behaviors can overlap with behavior patterns security software watches for, so a heuristic or behavior-based alert is possible. That explanation is a reason to investigate, not a finding that your particular warning is a false positive.

What "!ml" in the detection name means

The working interpretation of !ml is “machine learning”: an inference-based detection rather than confirmation through a specific known-malware signature. That interpretation still needs primary-source verification for this exact label. The suffix does not establish a false positive.

How to verify your download

For the client, use the project’s GitHub Releases page and choose ReSkate-1.1.3.zip. Avoid repackaged installers, download mirrors and links sent by unknown accounts.

In PowerShell, from the folder containing the archive, calculate its SHA-256:

Get-FileHash -Algorithm SHA256 -LiteralPath ".\ReSkate-1.1.3.zip"

Compare the complete output with a trusted, publisher-provided SHA-256 for that exact asset. This site has no verified expected value yet: TODO: verify before publish — client asset SHA-256. Computing a hash without an independent expected value only identifies your local file; it does not verify it. A mismatch means stop and investigate.

Adding an antivirus exclusion safely

First verify the file against a trusted expected checksum and investigate the alert. A matching hash establishes that your download matches the referenced asset; it does not prove the asset is harmless. If the checksum is unavailable, do not use this page as a reason to bypass the warning.

If you understand and accept the remaining risk, keep any exclusion limited to the verified file or dedicated installation folder. An exclusion reduces protection for its target, including later changes. Do not exclude your entire drive, Downloads folder or Steam library, and do not disable Defender across the computer.

What ReSkate actually does on your PC

The launcher checks itself for updates, then verifies game files. Missing files or a game updated beyond Steam build 25414733 can trigger an authentication prompt. The documented login options include the Steam app scan or credentials with Steam Guard. This is not an authentication audit.

• Mods: Mods\<mod name>\; load order: Mods\mods.json.
• Session log: logs\ReSkate.log.
• Offline skater, progress and parks: %LOCALAPPDATA%\ReSkate\profiles\offline\.
• Game settings and saves: %LOCALAPPDATA%\ReSkate\Game\, separate from normal game saves.
• Launcher settings: ReSkateLauncher.settings.json.

You can turn reporting off at Launcher Settings → ADVANCED → Send crash reports, or set the environment variable RESKATE_CRASH_REPORTING=0. These are the project’s documented privacy statements, not an independent guarantee about every mod or binary.

EA's stance, ban lists and what to avoid

EA’s terms still apply. The supplied project statement says ReSkate is a fan project with no affiliation or endorsement from Electronic Arts or Full Circle, and that you need your own Steam copy. The project also has a multiplayer ban list. Neither point grants immunity from bans or establishes EA approval.

Custom scripts can execute code: only install mods you trust and respect lobby rules. A clean malware scan does not settle account or compatibility questions. Steam Deck and troubleshooting guides are planned.

FAQ