I'm not real good w/ProcMon logs, but it seems that MEMORY.dmp is trying to be created (written) and all that's granted is Read access - so an Access Denied error is thrown.
I'd expect that "Run as administrator" would overcome this if it's able (as you've demonstrated).
I'm curious if there were any errors reported in EventViewer at this time.
