Elsevier embeds a hash in the PDF metadata that is unique for each time a PDF is downloaded.

Combined with access timestamps, they can uniquely identify the source of any shared PDFs.

Source: https://social.coop/@jonny/107685726645817029 -- Also includes tips for removing this data.