DisplayFusionCommand.exe is the command line tool, and the taskbar uses it to launch the applications from the shortcuts. DisplayFusionCommand.exe doesn't have any code that would be contacting anything on the Internet, but it's a signed executable, so it's likely Windows that's causing the Internet access to verify the certificate.

If you get the prompt again from your firewall, can you make a note of the destination IP and/or DNS name? It should resolve back to either Microsoft or VeriSign I believe.

Thanks!

Sounds good! To be honest, I'm not sure why the check is run under the process itself, and not some other Windows service. It's not something that we can configure, it just seems to be the way it works when Windows apps are digitally signed

Sorry I don't have a better answer!