I have just download the installation file for TOR, which I have never used before. However, after some problems getting it to work, I got it going. But when I restarted WSA, I got the following SSM popup, which I decided to block, because I didn't think it necessary for WSA to take control, since it (Tor browser) was effectively running. P.S. The reason I decided to try TOR, was because I had a problem loading a particular site, completely. Still, with TOR, the site does not load completely, but that is another problem.
The only reason I could think WRSA would want to launch a child process is to do a level 9 sandbox inspection, but I wouldn't expect that process launch to normally be visible outside the WRSA process. That's very odd. I'd love to hear an answer from PrevxHelp in this case.
I suspect it is either the sandboxing procedure or injection process of WSA into the child process. I wouldn't be worried about it - I suspect you won't see the prompt again.