Show loader snaps
The Show loader snaps flag captures detailed information about the loading and unloading of executable images and their supporting library modules and displays the data in the kernel debugger console.
Abbreviation |
sls |
Hexadecimal value |
0x2 |
Symbolic Name |
FLG_SHOW_LDR_SNAPS |
Destination |
System-wide registry entry, kernel flag, image file registry entry |
Comments
For system-wide (registry or kernel flag), this flag displays information about driver loading and unloading operations.
For per-process (image file), this flag displays information about loading and unloading of DLLs.