savedump.exe - This is the process for the NT memory dump, this writes the memory paging file, after booting back up this memory is saved in a file called memory, for a secure system do not remove.