There's entire industry to detect PDF forgeries. They analyze how exactly each software acts upon editing the file and detect these features.

Some software rewrap the page into say additional XObject, some add unique elements, some change one IDs but not the others.

I had a great blog post about it but can't find it right now. Will post if find the link.