Show loader snaps
The Show loader snaps flag captures detailed information about the loading and unloading of executable images and their supporting library modules and displays the data in the kernel debugger console.
Abbreviation |
sls |
Hexadecimal value |
0x2 |
Symbolic Name |
FLG_SHOW_LDR_SNAPS |
Destination |
System-wide registry entry, kernel flag, image file registry entry |
Comments
For system-wide (registry or kernel flag), this flag displays information about driver loading and unloading operations.
For per-process (image file), this flag displays information about loading and unloading of DLLs.
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for