Forensic check

HTPBE_DRAWING_OPS_INCONSISTENT

HTPBE_DRAWING_OPS_INCONSISTENT appears on 2.3% of modified results in our corpus. A marker is evidence about the file, not a judgement about the person who sent it.

Back to all checks
Marker profile

Content Stream Analysis

Page drawing evidence consistent with editing.

Share of modified results
2.3%
Frequency rank
#16
Among the 56 markers seen in modified results
Certain confidence
32.8%
Of results with this marker rated certain rather than high
Fires alone
14.9%
Results where it is the only marker found

Marker profile

What HTPBE_DRAWING_OPS_INCONSISTENT tells you

HTPBE_DRAWING_OPS_INCONSISTENT is one of the named findings returned in modification_markers when a PDF is reported as modified. It belongs to the Content Stream Analysis group of checks. These checks look at the content of the pages themselves for signs of edits made after the document was authored.

On 14.9% of the modified results that carry HTPBE_DRAWING_OPS_INCONSISTENT it is the only marker. A result with this marker carries 3.4 markers on average. It is most often found together with HTPBE_MULTIPLE_REVISION_LAYERS, on 63.9% of these results.

Example API response

How it appears in a result

When a PDF is reported as modified, HTPBE_DRAWING_OPS_INCONSISTENT is listed in modification_markers next to the verdict and its confidence. Each marker is a named, actionable finding – not a score.

GET /api/v1/result/{id}
{
  "id": "9f3a2c1d-8b47-4e6f-a012-3d5e7f890123",
  "status": "modified",
  "modification_confidence": "high",
  "modification_markers": [
    "HTPBE_DRAWING_OPS_INCONSISTENT"
  ],
  "creator": "Adobe Acrobat Pro DC",
  "has_incremental_updates": true,
  "page_count": 3
}

Full schema in the API reference →

Distributions

What ships alongside HTPBE_DRAWING_OPS_INCONSISTENT

The tools, formats and document traits that appear on the modified results carrying this marker. Shares are of those results.

Common Producers

Acrobat Sign writes 17.8% of these results – and 50.0% of all modified results naming it carry this marker.

Acrobat Sign50.0% of its modified17.8%
OpenPDF17.6% of its modified6.2%
Microsoft Word1.2% of its modified3.7%
Adobe PDF Library2.7% of its modified3.3%
4-Heights21.7% of its modified2.1%
Adobe Scan41.7% of its modified2.1%
Aspose2.5% of its modified1.2%
iOS Print to PDF1.0% of its modified1.2%

Common Creators

Microsoft Word is the Creator on 22.0% of these results.

Microsoft Word4.8% of its modified22.0%
JasperReports12.5% of its modified6.6%
LibreOffice Writer20.7% of its modified2.5%
Adobe Illustrator1.4% of its modified2.1%
Adobe Scan41.7% of its modified2.1%
Aspose1.6% of its modified1.7%
PDFium1.2% of its modified1.2%

Often found together with

HTPBE_MULTIPLE_REVISION_LAYERS sits next to HTPBE_DRAWING_OPS_INCONSISTENT more often than any other marker.

Document origin

Unknown41.5%
Consumer software32.4%
Institutional22.4%
Online editor2.5%
Scanned1.2%

Creator → Producer pairs

Microsoft Word → Acrobat Sign17.8%
JasperReports → OpenPDF5.8%
Microsoft Word → Microsoft Word3.7%
Adobe Illustrator → Adobe PDF Library2.1%
Adobe Scan → Adobe Scan2.1%
Aspose → Aspose1.2%
LibreOffice Writer → OpenOffice1.2%

Detected origin software

Microsoft Word22.0%
Adobe Illustrator2.1%
Browser (Print to PDF)2.1%
LibreOffice2.1%
PDF Candy1.2%

Confidence of the verdict

Certain32.8%
High67.2%

When these results were checked

April 202682.2%
May 20263.7%
June 20261.2%
July 20260.8%
September 20260.4%
October 202610.8%
November 20260.8%

Document length

1 page20.3%
2–5 pages17.0%
6–20 pages57.7%
21–100 pages5.0%

File size

Under 100 KB15.8%
100 KB – 1 MB78.0%
1 – 5 MB5.8%
Over 5 MB0.4%

PDF versions

PDF 1.546.9%
PDF 1.733.2%
PDF 1.49.1%
PDF 1.69.1%
PDF 1.31.2%

Year the document says it was created

201617.8%
20243.7%
20254.1%
202625.7%

Long tail

Notable observations

Smaller cuts of the results carrying HTPBE_DRAWING_OPS_INCONSISTENT – useful context, but treat each row as a single data point rather than a strong signal.

Digitally signed
56.4%

Of files carry at least one digital signature

Saved revisions
64.7%

Of files contain earlier saved revisions

Embedded JavaScript
36.5%

Of files contain JavaScript code

Embedded files
2.5%

Of files have attachments inside

Avg pages per document
6.9
Markers per result
3.4

Average number of markers on these results

FAQ

HTPBE_DRAWING_OPS_INCONSISTENT: common questions

What does HTPBE_DRAWING_OPS_INCONSISTENT mean?

HTPBE_DRAWING_OPS_INCONSISTENT is a named finding in an HTPBE? result: page drawing evidence consistent with editing. It is returned in the modification_markers list of a modified result and belongs to the Content Stream Analysis group of checks.

Does HTPBE_DRAWING_OPS_INCONSISTENT mean the document is fake?

No. A marker is evidence about the file, not a judgement about the person who sent it. It records that the file shows this pattern; it does not say why, and it does not assess what the document states. Read it together with the verdict and any other markers on the same result.

What should I do when a result contains HTPBE_DRAWING_OPS_INCONSISTENT?

Ask the sender for the original file straight from the issuing system, or request a fresh copy from the issuer. Check whether the document went through a later step such as re-saving, merging or converting, and verify it with the issuer before relying on it for a decision.

How common is HTPBE_DRAWING_OPS_INCONSISTENT?

HTPBE_DRAWING_OPS_INCONSISTENT appears on 2.3% of the modified results in the HTPBE? corpus. The corpus consists of PDFs people chose to submit for checking, so it skews towards documents someone had a reason to doubt and is not a sample of all PDFs.

Where do I see HTPBE_DRAWING_OPS_INCONSISTENT?

In the modification_markers list of the result returned by the HTPBE? API, and on the result page of a modified document. Other checks in the Content Stream Analysis group are listed below on this page; all 63 checks are listed on the how-it-works page.

Secure your workflow

Create your account – check PDFs on the web or with an API key, both ready on signup.
No sales call. Cancel any time.