Sayan Sen Neowin · Apr 15, 2023 09:34 EDT · Hot! with 0 comments

Microsoft had recently released new Defender anti-malware update package for Windows OS installation images, ie, for Windows Imaging Format (WIM) and VHD (Virtual Hard Disk) formats. The new definitions support Windows 11, all editions of Windows 10, Windows Servers 2016 and 2019. This update package is necessary as a Windows installation image may contain old, outdated anti-malware definitions and software binaries. Aside from better security, these updates can also provide improved performance benefits too in some cases.

Microsoft is delivering the latest security definitions for Windows images via security intelligence update version 1.385.1537.0. The Defender package version is 20230330.2. On the support document describing the the new update, Microsoft writes:

The first hours of a newly installed Windows deployment can leave the system vulnerable because of a Microsoft Defender protection gap. This is because the OS installation images may contain outdated antimalware software binaries.

[..] Devices using either the Windows built-in antivirus or another security solution can benefit from these updates.

[..] This article describes antimalware update package for Microsoft Defender in the OS installation images (WIM and VHD files). This feature supports the following OS installation images:

Version information

This package updates the anti-malware client, anti-malware engine, and signature versions in the OS installation images to following versions:

From Microsoft's security bulletin, we learn that the security intelligence update version 1.385.1537.0 was released at the end of last month. It adds threat detections for various trojans, hacktools, ransomware, among others. For those wondering, the latest intelligence update is version 1.387.1114.0 at the time of writing.