TrayStatus is digitally signed, and as a result Windows will attempt to validate the certificate. If your firewall software can tell you what the endpoint is, it will probably be a Microsoft server. There was a discussion about this in regards to DisplayFusion as well:
http://www.binaryfortress.com/Forum/index.php?topic=1599.msg7288#msg7288