HTPBE_
HTPBE_IMAGE_EDITED_AND_RESAVED appears on 0.3% of modified results in our corpus. A marker is evidence about the file, not a judgement about the person who sent it.
Back to all checksMarker profileImage Forensics
Embedded image showing signs of having been edited and re-saved.
Marker profile
What HTPBE_IMAGE_EDITED_AND_RESAVED tells you
HTPBE_IMAGE_EDITED_AND_RESAVED is one of the named findings returned in modification_markers when a PDF is reported as modified. It belongs to the Image Forensics group of checks. These checks look at embedded images and scan-like pages for editing, re-saving or a capture origin that does not hold up.
On 53.3% of the modified results that carry HTPBE_IMAGE_EDITED_AND_RESAVED it is the only marker. A result with this marker carries 2.0 markers on average. It is most often found together with HTPBE_CONTENT_STREAM_EDITING_MARKERS, on 23.3% of these results.
Example API response
How it appears in a result
When a PDF is reported as modified, HTPBE_IMAGE_EDITED_AND_RESAVED is listed in modification_markers next to the verdict and its confidence. Each marker is a named, actionable finding – not a score.
{
"id": "9f3a2c1d-8b47-4e6f-a012-3d5e7f890123",
"status": "modified",
"modification_confidence": "high",
"modification_markers": [
"HTPBE_IMAGE_EDITED_AND_RESAVED"
],
"creator": "Adobe Acrobat Pro DC",
"has_incremental_updates": true,
"page_count": 3
}Full schema in the API reference →
Distributions
What ships alongside HTPBE_IMAGE_EDITED_AND_RESAVED
The tools, formats and document traits that appear on the modified results carrying this marker. Shares are of those results.
Common Producers
Common Creators
Scanner TOSHIBA is the Creator on 23.3% of these results.
Often found together with
HTPBE_CONTENT_STREAM_EDITING_MARKERS sits next to HTPBE_IMAGE_EDITED_AND_RESAVED more often than any other marker.
Document origin
Creator → Producer pairs
Detected origin software
Confidence of the verdict
When these results were checked
Document length
File size
PDF versions
Year the document says it was created
Long tail
Notable observations
Smaller cuts of the results carrying HTPBE_IMAGE_EDITED_AND_RESAVED – useful context, but treat each row as a single data point rather than a strong signal.
Of files carry at least one digital signature
Of files contain earlier saved revisions
Of files contain JavaScript code
Of files have attachments inside
Average number of markers on these results
Related checks
Other Image Forensics checks
Checks from the same group. Each card links to its own reference page.
HTPBE_COLLAPSED_TO_RASTERDocument content converted to images after creationHTPBE_PHYSICAL_SCAN_GEOMETRYA page captured from a physical copy rather than the original fileHTPBE_FAKE_SCANNER_ORIGINA scan origin that does not hold upHTPBE_RENDERED_PSEUDO_SCANScan-like pages with signs of software renderingFAQ
HTPBE_IMAGE_EDITED_AND_RESAVED: common questions
What does HTPBE_IMAGE_EDITED_AND_RESAVED mean?
Does HTPBE_IMAGE_EDITED_AND_RESAVED mean the document is fake?
What should I do when a result contains HTPBE_IMAGE_EDITED_AND_RESAVED?
How common is HTPBE_IMAGE_EDITED_AND_RESAVED?
Where do I see HTPBE_IMAGE_EDITED_AND_RESAVED?
Secure your workflow
Create your account – check PDFs on the web or with an API key, both ready on signup.
No sales call. Cancel any time.