Forum Discussion

Yassin Koleilat's avatar
Yassin Koleilat
Brass Contributor
Aug 29, 2025
Solved

MS Defender - Installation Error version 101.25072 on macOS

Dear experts, The latest version of MS Defender can't be installed. I'm getting an error message since release date (5th Aug). I have tested to restart the computer, tested with different networks, ...
  • BrandonJ365's avatar
    BrandonJ365
    Sep 08, 2025

    FYI...MS has this posted on their service health status page.  They have a fix in the works but sounds like it will be a "side channel" upgrade of some kind.  I'm betting we'll be having to push a shell script via MDM that will end up doing a "rip and replace" of sorts.

    https://admin.cloud.microsoft/?#/servicehealth/:/alerts/DZ1144032

    UPDATE: Microsoft has published the fix.  As near as I can tell, it involves pushing out an MDM profile to enable a tamper protection exclusion only for a special "upgrade helper" package Microsoft has provided.  You then push out the pkg which sets tamper protection to audit mode, upgrades Defender, then turns tamper protection back on.  Instructions and the helper package are found in the below link, which was published in the service health alert linked above.

    https://github.com/microsoft/mdatp-xplat/tree/master/macos/upgrade_from_2506_helper

vebhoy's avatar
vebhoy
Copper Contributor
Sep 01, 2025

Same issue here on M1 Mac.

Logs from AutoUpdate states that it fails due to "Invalid Hash" after download:

2025-09-01 13:15:19 [Microsoft Update Assistant] <Info> DownloadTask.DownloadBegin: {"UpdatePkg":"wdav-upgrade.pkg","UpdateID":"CFB7EF38-C76F-4EE6-8ED4-96567A5B0435","ExceedsChainedSize":"NO","IsSilent":"NO","PreviousUpdateID":"","AppID":"WDAV00","BundleVersion":"101.25062.0004","UpdateVersion":"101.25072.0010","LatestOnOfferBlocked":"NO"}
2025-09-01 13:15:19 [Microsoft Update Assistant] <Info> NOT.COLLECTED: {"Payload":"Downloading. URL: https://officecdnmac.microsoft.com/pr/1ac37578-5a24-40fb-892e-b89d85b6dfaa/MacAutoupdate/wdav-upgrade.pkg"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Info> NOT.COLLECTED: {"Payload":"Fetching file Success. File: https://officecdnmac.microsoft.com/pr/1ac37578-5a24-40fb-892e-b89d85b6dfaa/MacAutoupdate/wdav-upgrade.pkg"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Error> ErrorsAndWarnings: {"Error":"Invalid Hash","File":"wdav-upgrade.pkg","Operation":"Download","AppID":"WDAV00"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Info> ErrorsAndWarnings: {"Error":"Failed to download https://officecdnmac.microsoft.com/pr/1ac37578-5a24-40fb-892e-b89d85b6dfaa/MacAutoupdate/wdav-upgrade.pkg. Reason: 'Error Domain=com.microsoft.autoupdate Code=501 \"(null)\"'","Operation":"Download"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Warning> ErrorsAndWarnings: {"Error":"Failed. Msg: {\n    DownloadURL = \"officecdnmac.microsoft.com/pr/1ac37578-5a24-40fb-892e-b89d85b6dfaa/MacAutoupdate/wdav-upgrade.pkg\";\n    ErrorCode = 501;\n    ErrorDomain = \"com.microsoft.autoupdate\";\n}","UpdateID":"CFB7EF38-C76F-4EE6-8ED4-96567A5B0435","Operation":"Download","AppID":"WDAV00"}
2025-09-01 13:15:33 [Microsoft Update Assistant] <Info> NOT.COLLECTED: {"Payload":"Updating Application State for App: WDAV00 to: 9 info: Sorry, there's a problem with the downloaded file, so you can't update now. Please try again later."}
2025-09-01 13:15:33 [Microsoft AutoUpdate] <Info> NOT.COLLECTED: {"Payload":"Updater state changed: 2"}



Resources