isjpg: / iswebp: / istif: / ...

[NotNull]

These ^ functions don't give the expected results.

For example: ext:jpg isjpg: does not return any .jpg file.
Whereas ext:jpg !isjpg: returns all .jpg files.
A picture.webp that was renamed to picture.jpg was not detected as a "fake" jpg either.

Am I misunderstanding how these functions operate?


(Tested with isbmp: isgif: isico: isjpeg: isjpg: ispcx: ispng: ispsd: istga: istif: istiff: iswebp: )

[void]

Could you please check what is shown in the File Signature column:

Include the following in your search:

addcolumn:file-signature

Do .jpg files show the file signature as image/jpeg ?



isjpg: will check if the file-signature is image/jpeg.

Did the other functions work? (eg: isbmp: isgif: ) -or do they have the same issue?



Do you have a macro defined that is overriding isjpg: ?
One way to check:
In Everything, from the Tools menu, under the Debug submenu, click Start Debug Logging.
Perform your ext:jpg isjpg: search
From the Tools menu, under the Debug submenu, click Stop Debug Logging.
This will open your Everything Debug Log.txt in Notepad.

Look for the following lines:

FILE TERM START 00000000307095b8 M 000000000027e120 N 000000000027e240
00000000307095b8 20e01100 M 00000000307090b8 N 000000000027e240 OP 205 jpg
00000000307090b8 20e01100 M 000000000027e120 N 000000000027e240 OP 351

OP 351 is the compare file-signature OP code. -Is this OP code missing?

[NotNull]

Problem solved:

File signature was property indexed for just exe and msi files (leftover from some tests) so no file signature was shown for any other file.
After removing File signature from property indexing, all behaves as expected again.


Note: ext:webp fromdisk:iswebp: (etc.) also gave the expected results