Is MovieStudio safe?

Question

Accepted Answer

MovieStudio is critical risk. Every time you navigate to a new page or switch tabs, the Movie Maker MovieStudio extension transmits the full URL of that page to stream.redcoolmedia.net. Our dynamic analysis captured GET requests to stream.redcoolmedia.net/api/moviemakeru.php carrying hex-encoded versions of visited URLs — including https://www.google.com/ and https://www.amazon.com/ — paired with a persistent 10-character tracking ID. This happens automatically in the background without any user action or disclosure in the extension's Chrome Web Store listing. When Movie Maker MovieStudio is first installed, it generates a random 10-character identifier and stores it permanently in your browser's local storage. This ID is included in every request the extension makes to stream.redcoolmedia.net — allowing all your activity across multiple browser sessions and restarts to be linked to a single profile. Our dynamic analysis confirmed the ID value mey7ptac6h was present in all 7 captured requests to redcoolmedia.net endpoints, consistent across sessions. The extension also stores a second copy of the same ID in chrome.storage.sync, which can replicate it across your devices if Chrome sync is enabled.

Is Movie maker MovieStudio video editor safe?

Findings