Skip to main content
December 9, 2023
Question

1Password-Crash-Handler - BadGacha

  • December 9, 2023
  • 13 replies
  • 609 views

After updating 1Password to 1Password for Mac 8.10.22 (81022042) on the Nightly channel, MacOS (Sonoma 14.2 (23C64) XProtect began reporting the following warnings:

2023-12-09 09:00:29.589 BadGacha 👉 no status_message report time 0.0000000 {"status":null,"process":{"pid":21423,"name":"1Password-Crash-Handler"},"action":"report"}
2023-12-09 09:00:29.590 BadGacha 👉 no status_message report time 0.0000000 {"status":null,"action":"report","process":{"pid":939,"name":"1Password-Crash-Handler"}}
2023-12-09 09:00:29.636 BadGacha ⚠️ ThreatDetected time 0.0000170 {"caused_by":[],"status_code":21,"execution_duration":1.704692840576172e-05,"status_message":"ThreatDetected"}


1Password Version: 1Password for Mac 8.10.22 (81022042)
Extension Version: Not Provided
OS Version: MacOS 14.2 (23C64)
Browser: Not Provided

13 replies

1P_Dave
1Password Employee
January 16, 2024

Hello everyone,

At this time we believe this may indeed be a false positive. 1Password's crash handling functionality uses reviewed open source code and Apple-provided operating system interfaces for handling crashes and exceptions that happen to a macOS application.

The team will watch to see if any further action is needed.

-Dave

February 25, 2024

Hello all 👋,

Here's another datapoint: BadGacha popped up in my XPROTECT Remediator Report on 02/23/24, also due to 1Password-Crash-Handler. My Report looks just like what @BenNeivert posted.

Possibly BG was listed previously but my logs rolled over on the 23rd.

-SM-


M1 MBP / macOS 14.3.1 / 1P v8.10.26 (81026039)

1P_Dave
1Password Employee
February 27, 2024

@EssEmm

Thank you for reaching out. The team continues to monitor the situation and my previous comment is still accurate:

At this time we believe this may indeed be a false positive. 1Password's crash handling functionality uses reviewed open source code and Apple-provided operating system interfaces for handling crashes and exceptions that happen to a macOS application.

-Dave