Tagstudio connecs to api.snapcraft.io according to Virustotal

[gelatinbomb]

I always do a virustotal check on the executables I use in my pc. The result seems to be safe but it also indicates that the executable pings to 4 different IPs from Canonical? The domain seems to be api.snapcraft.io. I'm curious about it. Why the executable seems to do that? Is not a Snap so why it would ping that domain?

[Computerdores]

That must be happening due to some dependency as none of our code is responsible for that, no clue which one though.
(Also, it would make sense to link the virustotal results you are referencing)

[gelatinbomb]

I tried both the Windows and Linux and both of them seems to do a connection, different domains for some reason.
I also tried with my own compiled binary of Tagstudio and it also pings to api.snapcraft.io.
This is the virustotal link: https://www.virustotal.com/gui/file/28af4fffa8ac88f7e45f5c1ef88a987ba6e95e7c1497244e82027151f7a4b409/relations

[Computerdores]

looking at that it seems to me that that is more likely to be a quirk of the sandbox that reports it (the capev2 docs recommend using Ubuntu LTS for the analysis VMs), because the other sandbox sees 0 network traffic (as I would expect).