logo
Forensic check

HTPBE_XMP_DATES_DESYNCED

HTPBE_XMP_DATES_DESYNCED appears on 0.5% of modified results in our corpus. A marker is evidence about the file, not a judgement about the person who sent it.

Back to all checks
Marker profile

Metadata & Timestamps

Metadata timing indicating a later change.

Share of modified results
0.5%
Frequency rank
#30
Among the 56 markers seen in modified results
Certain confidence
60.0%
Of results with this marker rated certain rather than high
Fires alone
23.6%
Results where it is the only marker found

Marker profile

What HTPBE_XMP_DATES_DESYNCED tells you

HTPBE_XMP_DATES_DESYNCED is one of the named findings returned in modification_markers when a PDF is reported as modified. It belongs to the Metadata & Timestamps group of checks. These checks compare the dates and descriptive properties recorded in a file with each other and with a plausible production history.

On 23.6% of the modified results that carry HTPBE_XMP_DATES_DESYNCED it is the only marker. A result with this marker carries 3.1 markers on average. It is most often found together with HTPBE_DATES_DISAGREE, on 49.1% of these results.

Example API response

How it appears in a result

When a PDF is reported as modified, HTPBE_XMP_DATES_DESYNCED is listed in modification_markers next to the verdict and its confidence. Each marker is a named, actionable finding – not a score.

GET /api/v1/result/{id}
{
  "id": "9f3a2c1d-8b47-4e6f-a012-3d5e7f890123",
  "status": "modified",
  "modification_confidence": "high",
  "modification_markers": [
    "HTPBE_XMP_DATES_DESYNCED"
  ],
  "creator": "Adobe Acrobat Pro DC",
  "has_incremental_updates": true,
  "page_count": 3
}

Full schema in the API reference →

Distributions

What ships alongside HTPBE_XMP_DATES_DESYNCED

The tools, formats and document traits that appear on the modified results carrying this marker. Shares are of those results.

Common Producers

Cash App PDF Exporter writes 10.9% of these results – and 100.0% of all modified results naming it carry this marker.

Cash App PDF Exporter100.0% of its modified10.9%
Acrobat Distiller2.6% of its modified9.1%
TCPDF2.7% of its modified7.3%
Apache FOP2.5% of its modified5.5%
iLovePDF0.4% of its modified5.5%
Microsoft Word0.4% of its modified5.5%
mPDF2.4% of its modified5.5%

Common Creators

Cash App by Block, Inc. is the Creator on 10.9% of these results.

Cash App by Block, Inc.100.0% of its modified10.9%
Expert PDF 1518.8% of its modified10.9%
OpenText Exstream15.4% of its modified7.3%
Apache FOP2.4% of its modified5.5%
Microsoft Word0.3% of its modified5.5%
Quadient3.8% of its modified5.5%

Often found together with

HTPBE_DATES_DISAGREE sits next to HTPBE_XMP_DATES_DESYNCED more often than any other marker.

Document origin

Institutional54.5%
Consumer software32.7%
Online editor5.5%

Creator → Producer pairs

Cash App by Block, Inc. → Cash App PDF Exporter10.9%
Apache FOP → Apache FOP5.5%
Microsoft Word → Microsoft Word5.5%

Detected origin software

Browser (Print to PDF)21.8%
Microsoft Word5.5%

Confidence of the verdict

Certain60.0%
High40.0%

When these results were checked

May 202612.7%
June 20261.8%
July 20265.5%
August 202621.8%
September 20269.1%
October 202632.7%
November 202616.4%

Document length

1 page38.2%
2–5 pages45.5%
6–20 pages14.5%
21–100 pages1.8%

File size

Under 100 KB41.8%
100 KB – 1 MB52.7%
1 – 5 MB5.5%

PDF versions

PDF 1.750.9%
PDF 1.416.4%
PDF 2.012.7%
PDF 1.510.9%
PDF 1.69.1%

Year the document says it was created

202692.7%

Long tail

Notable observations

Smaller cuts of the results carrying HTPBE_XMP_DATES_DESYNCED – useful context, but treat each row as a single data point rather than a strong signal.

Digitally signed
0%

Of files carry at least one digital signature

Saved revisions
18.2%

Of files contain earlier saved revisions

Embedded JavaScript
0%

Of files contain JavaScript code

Embedded files
0%

Of files have attachments inside

Avg pages per document
3.9
Markers per result
3.1

Average number of markers on these results

Related checks

Other Metadata & Timestamps checks

Checks from the same group. Each card links to its own reference page.

HTPBE_DATES_DISAGREERecorded dates showing the document was changed after creation
Share of modified42.0%
Seen together49.1%
HTPBE_TIMESTAMP_LAYERS_DISAGREEInternal timestamp anomalies indicating a later change
Share of modified8.8%
HTPBE_IDENTITY_LAYERS_DISAGREEDocument properties indicating later alteration
Share of modified2.9%
HTPBE_IMPOSSIBLE_TIMESTAMPTimestamp values that are physically impossible
Share of modified1.5%
Seen together14.5%
HTPBE_INVALID_TIMEZONEDate information that is malformed
Share of modified0.1%
HTPBE_ANNOTATION_PREDATES_CREATIONAnnotation dates that do not fit the document’s timeline
Share of modified0.8%
HTPBE_UNLOCK_TOOL_RESIDUESigns that a document-unlocking or editing tool processed this file
Share of modified<0.1%
HTPBE_TIMEZONE_LAYERS_DISAGREETime-zone evidence of a later change
Share of modified<0.1%

FAQ

HTPBE_XMP_DATES_DESYNCED: common questions

What does HTPBE_XMP_DATES_DESYNCED mean?

HTPBE_XMP_DATES_DESYNCED is a named finding in an HTPBE? result: metadata timing indicating a later change. It is returned in the modification_markers list of a modified result and belongs to the Metadata & Timestamps group of checks.

Does HTPBE_XMP_DATES_DESYNCED mean the document is fake?

No. A marker is evidence about the file, not a judgement about the person who sent it. It records that the file shows this pattern; it does not say why, and it does not assess what the document states. Read it together with the verdict and any other markers on the same result.

What should I do when a result contains HTPBE_XMP_DATES_DESYNCED?

Ask the sender for the original file straight from the issuing system, or request a fresh copy from the issuer. Check whether the document went through a later step such as re-saving, merging or converting, and verify it with the issuer before relying on it for a decision.

How common is HTPBE_XMP_DATES_DESYNCED?

HTPBE_XMP_DATES_DESYNCED appears on 0.5% of the modified results in the HTPBE? corpus. The corpus consists of PDFs people chose to submit for checking, so it skews towards documents someone had a reason to doubt and is not a sample of all PDFs.

Where do I see HTPBE_XMP_DATES_DESYNCED?

In the modification_markers list of the result returned by the HTPBE? API, and on the result page of a modified document. Other checks in the Metadata & Timestamps group are listed below on this page; all 63 checks are listed on the how-it-works page.

Secure your workflow

Create your account – check PDFs on the web or with an API key, both ready on signup.
No sales call. Cancel any time.

Start Free – Close the Structural Fraud GapSee Pricing
Read API Docs →