Forum Discussion
MS Defender - Installation Error version 101.25072 on macOS
FYI...MS has this posted on their service health status page. They have a fix in the works but sounds like it will be a "side channel" upgrade of some kind. I'm betting we'll be having to push a shell script via MDM that will end up doing a "rip and replace" of sorts.
https://admin.cloud.microsoft/?#/servicehealth/:/alerts/DZ1144032
UPDATE: Microsoft has published the fix. As near as I can tell, it involves pushing out an MDM profile to enable a tamper protection exclusion only for a special "upgrade helper" package Microsoft has provided. You then push out the pkg which sets tamper protection to audit mode, upgrades Defender, then turns tamper protection back on. Instructions and the helper package are found in the below link, which was published in the service health alert linked above.
https://github.com/microsoft/mdatp-xplat/tree/master/macos/upgrade_from_2506_helper
Same issue here on M1 Mac.
Logs from AutoUpdate states that it fails due to "Invalid Hash" after download:
2025-09-01 13:15:19 [Microsoft Update Assistant] <Info> DownloadTask.DownloadBegin: {"UpdatePkg":"wdav-upgrade.pkg","UpdateID":"CFB7EF38-C76F-4EE6-8ED4-96567A5B0435","ExceedsChainedSize":"NO","IsSilent":"NO","PreviousUpdateID":"","AppID":"WDAV00","BundleVersion":"101.25062.0004","UpdateVersion":"101.25072.0010","LatestOnOfferBlocked":"NO"}
2025-09-01 13:15:19 [Microsoft Update Assistant] <Info> NOT.COLLECTED: {"Payload":"Downloading. URL: https://officecdnmac.microsoft.com/pr/1ac37578-5a24-40fb-892e-b89d85b6dfaa/MacAutoupdate/wdav-upgrade.pkg"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Info> NOT.COLLECTED: {"Payload":"Fetching file Success. File: https://officecdnmac.microsoft.com/pr/1ac37578-5a24-40fb-892e-b89d85b6dfaa/MacAutoupdate/wdav-upgrade.pkg"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Error> ErrorsAndWarnings: {"Error":"Invalid Hash","File":"wdav-upgrade.pkg","Operation":"Download","AppID":"WDAV00"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Info> ErrorsAndWarnings: {"Error":"Failed to download https://officecdnmac.microsoft.com/pr/1ac37578-5a24-40fb-892e-b89d85b6dfaa/MacAutoupdate/wdav-upgrade.pkg. Reason: 'Error Domain=com.microsoft.autoupdate Code=501 \"(null)\"'","Operation":"Download"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Warning> ErrorsAndWarnings: {"Error":"Failed. Msg: {\n DownloadURL = \"officecdnmac.microsoft.com/pr/1ac37578-5a24-40fb-892e-b89d85b6dfaa/MacAutoupdate/wdav-upgrade.pkg\";\n ErrorCode = 501;\n ErrorDomain = \"com.microsoft.autoupdate\";\n}","UpdateID":"CFB7EF38-C76F-4EE6-8ED4-96567A5B0435","Operation":"Download","AppID":"WDAV00"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Info> NOT.COLLECTED: {"Payload":"Updating Application State for App: WDAV00 to: 9 info: Sorry, there's a problem with the downloaded file, so you can't update now. Please try again later."}
2025-09-01 13:15:33 [Microsoft AutoUpdate] <Info> NOT.COLLECTED: {"Payload":"Updater state changed: 2"}