Tier 3finding · pdf-creator-fingerprints
PDF creator fingerprints — the scanning toolchain
PDF `/Creator` and `/Producer` fields expose the full scanning and redaction toolchain used to assemble the release.
Provides a window into the production pipeline: physical scans on late-90s hardware, Fujitsu overhead scanners, Adobe OCR, macOS PDF assembly.
Evidence
Software signatures collected from PDF /Creator and /Producer fields across all 124 PDFs:
- HP 9100C Digital Sender — late-90s scanner-to-email appliance.
- PFU ScanSnap Home 2.20.0 #SV600 — Fujitsu overhead document scanner.
- PaperStream Capture 5.1 — Fujitsu scanning software.
- LuraDocument PDF Compressor Server 5.7.66.46 — enterprise TIFF→PostScript→PDF compression (annotation
tif_convert_2_ps()). - Adobe Photoshop 25.6 (Windows) — image-based PDFs went through Photoshop (consistent with burned-in redactions).
- macOS Version 26.4 (Build 25E246) Quartz PDFContext, AppendMode 1.1 — some PDFs assembled on macOS 26.4 build 25E246; pages appended post-generation.
- Adobe Acrobat (32-bit) 26 Paper Capture Plug-in — OCR pass via Acrobat's Paper Capture.
- PFUPDF Engine 1.3.10 and 1.3.80 — two different Fujitsu PDF engines, suggesting two scanning stations / time periods.
- Aspose Pty Ltd. — programmatic PDF assembly library, suggesting automated batch processing for some documents.
Sources
www.war.gov/medialink/ufo/release_1
All 124 PDF /Creator and /Producer fields