Forensic check

HTPBE_SCAN_IN_DIGITAL_DOC

Q: What does HTPBE_SCAN_IN_DIGITAL_DOC mean?

HTPBE_SCAN_IN_DIGITAL_DOC is a named finding in an HTPBE result: image-based page content mixed into a digitally produced document. It is returned in the modification_markers list of a modified result and belongs to the Document Assembly group of checks.

HTPBE_SCAN_IN_DIGITAL_DOC appears on 1.3% of modified results in our corpus. A marker is evidence about the file, not a judgement about the person who sent it.

Back to all checks

Marker profile

Document Assembly

Image-based page content mixed into a digitally produced document.

Share of modified results

1.3%

Frequency rank

#22

Among the 56 markers seen in modified results

Certain confidence

26.7%

Of results with this marker rated certain rather than high

Fires alone

53.7%

Results where it is the only marker found

Marker profile

What HTPBE_SCAN_IN_DIGITAL_DOC tells you

HTPBE_SCAN_IN_DIGITAL_DOC is one of the named findings returned in modification_markers when a PDF is reported as modified. It belongs to the Document Assembly group of checks. These checks look at whether a document reads as one coherent production or as pages and parts brought together from several places.

On 53.7% of the modified results that carry HTPBE_SCAN_IN_DIGITAL_DOC it is the only marker. A result with this marker carries 2.3 markers on average. It is most often found together with HTPBE_MULTIPLE_REVISION_LAYERS, on 26.5% of these results.

Example API response

How it appears in a result

When a PDF is reported as modified, HTPBE_SCAN_IN_DIGITAL_DOC is listed in modification_markers next to the verdict and its confidence. Each marker is a named, actionable finding – not a score.

GET /api/v1/result/{id}

{
  "id": "9f3a2c1d-8b47-4e6f-a012-3d5e7f890123",
  "status": "modified",
  "modification_confidence": "high",
  "modification_markers": [
    "HTPBE_SCAN_IN_DIGITAL_DOC"
  ],
  "creator": "Adobe Acrobat Pro DC",
  "has_incremental_updates": true,
  "page_count": 3
}

Full schema in the API reference →

Distributions

What ships alongside HTPBE_SCAN_IN_DIGITAL_DOC

The tools, formats and document traits that appear on the modified results carrying this marker. Shares are of those results.

Common Producers

Adobe PDF Library writes 49.3% of these results – and 23.0% of all modified results naming it carry this marker.

Adobe PDF Library23.0% of its modified49.3%

PDFlib25.5% of its modified9.6%

iText1.0% of its modified7.4%

PDFium3.6% of its modified5.9%

iOS Print to PDF1.7% of its modified3.7%

Microsoft Word0.5% of its modified2.9%

Aspose2.5% of its modified2.2%

macOS Print to PDF0.5% of its modified2.2%

Common Creators

Adobe Illustrator is the Creator on 48.5% of these results.

Adobe Illustrator18.5% of its modified48.5%

PDFium3.7% of its modified6.6%

VCTransaction36.0% of its modified6.6%

Microsoft Word0.5% of its modified4.4%

ImageCentre Statements40.0% of its modified2.9%

JasperReports3.1% of its modified2.9%

Often found together with

HTPBE_MULTIPLE_REVISION_LAYERS sits next to HTPBE_SCAN_IN_DIGITAL_DOC more often than any other marker.

HTPBE_MULTIPLE_REVISION_LAYERS26.5%

HTPBE_DATES_DISAGREE24.3%

HTPBE_MIXED_PAGE_DIMENSIONS12.5%

HTPBE_METADATA_ONLY_REVISION9.6%

HTPBE_TOOL_VS_STRUCTURE_MISMATCH8.8%

HTPBE_INCOMPLETE_REDACTION7.4%

HTPBE_PAGES_FROM_MULTIPLE_SOURCES7.4%

HTPBE_PHYSICAL_SCAN_GEOMETRY5.9%

Document origin

Consumer software64.0%

Institutional24.3%

Unknown4.4%

Online editor2.2%

Scanned2.2%

Unverifiable2.2%

Creator → Producer pairs

Adobe Illustrator → Adobe PDF Library48.5%

VCTransaction → PDFlib6.6%

PDFium → PDFium5.9%

JasperReports → iText2.9%

Microsoft Word → Microsoft Word2.9%

ImageCentre Statements → PDFlib2.2%

Detected origin software

Adobe Illustrator48.5%

macOS / iOS (Quartz)5.9%

Microsoft Word4.4%

Microsoft Print to PDF2.2%

Confidence of the verdict

Certain25.7%

High70.6%

When these results were checked

March 20263.7%

April 202661.0%

May 20265.1%

June 20265.9%

July 20262.9%

August 20268.8%

September 20266.6%

October 20265.1%

November 20260.7%

Document length

2–5 pages65.4%

6–20 pages25.0%

21–100 pages5.9%

File size

100 KB – 1 MB66.2%

1 – 5 MB27.2%

Over 5 MB6.6%

PDF versions

PDF 1.456.6%

PDF 1.727.2%

PDF 1.55.1%

PDF 1.64.4%

PDF 1.32.9%

Year the document says it was created

20222.2%

20256.6%

202682.4%

Long tail

Notable observations

Smaller cuts of the results carrying HTPBE_SCAN_IN_DIGITAL_DOC – useful context, but treat each row as a single data point rather than a strong signal.

Digitally signed

5.9%

Of files carry at least one digital signature

Saved revisions

78.7%

Of files contain earlier saved revisions

Embedded JavaScript

Of files contain JavaScript code

Embedded files

Of files have attachments inside

Avg pages per document

7.7

Markers per result

2.3

Average number of markers on these results

Related checks

HTPBE_SCAN_IN_DIGITAL_DOC: common questions

What does HTPBE_SCAN_IN_DIGITAL_DOC mean?

HTPBE_SCAN_IN_DIGITAL_DOC is a named finding in an HTPBE? result: image-based page content mixed into a digitally produced document. It is returned in the modification_markers list of a modified result and belongs to the Document Assembly group of checks.

Does HTPBE_SCAN_IN_DIGITAL_DOC mean the document is fake?

No. A marker is evidence about the file, not a judgement about the person who sent it. It records that the file shows this pattern; it does not say why, and it does not assess what the document states. Read it together with the verdict and any other markers on the same result.

What should I do when a result contains HTPBE_SCAN_IN_DIGITAL_DOC?

Ask the sender for the original file straight from the issuing system, or request a fresh copy from the issuer. Check whether the document went through a later step such as re-saving, merging or converting, and verify it with the issuer before relying on it for a decision.

How common is HTPBE_SCAN_IN_DIGITAL_DOC?

HTPBE_SCAN_IN_DIGITAL_DOC appears on 1.3% of the modified results in the HTPBE? corpus. The corpus consists of PDFs people chose to submit for checking, so it skews towards documents someone had a reason to doubt and is not a sample of all PDFs.

Where do I see HTPBE_SCAN_IN_DIGITAL_DOC?

In the modification_markers list of the result returned by the HTPBE? API, and on the result page of a modified document. Other checks in the Document Assembly group are listed below on this page; all 63 checks are listed on the how-it-works page.

Secure your workflow

Create your account – check PDFs on the web or with an API key, both ready on signup.
No sales call. Cancel any time.

Start Free – Close the Structural Fraud Gap See Pricing

Read API Docs →