logologo
  • How it works
  • Why It Matters
  • Statistics
  • Pricing
  • FAQ
  • API
logologo
  • How it works
  • Why It Matters
  • Statistics
  • Pricing
  • FAQ
  • API
HTPBE?

Structural PDF tamper detection API. Catches edits your KYC stack misses.

Product

  • How It Works
  • Use Cases
  • Metadata Viewer
  • Pricing

Developers

  • API Reference
  • GitHub/docs
  • Changelogv2.48.3

Resources

  • About
  • Blog
  • Comparisons
  • Legal & Imprint

© 2024–2026 TMI Iurii Rogulia · VAT ID: FI29845875 · Made in Finland

Status

Algorithm v2.48.3

Tool profile

OpenText Exstream

OpenText Exstream appears on both unmodified and modified documents in our corpus. The name alone is never the verdict; each file is judged on its own structure.

Back to all statistics
Forensic verdict

Mixed signal

Based on this tool’s share of the HTPBE? corpus.

Modification rate
41%-8pp below baseline
Corpus baseline: 49%
Corpus share
0.26%
Share of all analyzed appearances
Modification rate
41%
-8pp below baseline
Role split
96%C/4%P
Creator vs Producer share of appearances

Corpus profile

How OpenText Exstream shows up in HTPBE? corpus

OpenText Exstream is one of the PDF-handling tools surfaced in the HTPBE? corpus. OpenText Exstream appears predominantly as the original Creator (96% of its occurrences) — i.e. on documents that started life inside OpenText Exstream rather than passing through it as a downstream re-saver.

HTPBE? reads the OpenText Exstream name as one input among many and weighs it together with the rest of the file’s structure – the tool itself is never the accusation.

On documents where OpenText Exstream acts as Creator, 38% carry modification markers; on documents where it acts as Producer, 100% do. These are observed rates inside the HTPBE? corpus and should be read as base-rates, not as accusations against OpenText Exstream or its users.

The signal
HTPBE? reads the OpenText Exstream name as one input among many and weighs it together with the rest of the file’s structure – the tool itself is never the accusation.

Reading guide

How to read this page

Every PDF stores two software labels: the Creator, which names the application that first produced the document, and the Producer, which names the software that last wrote the file out. This page counts the files HTPBE? has analysed where OpenText Exstream fills one of those labels, and shows how often those files carry modification markers, which PDF versions they use and which other tools sit next to them.

A tool name tells you where a file passed through, not whether anyone changed its content. A Creator and Producer that agree usually point to a single pass; a Producer that differs from the Creator means the file was written out again by another program, which has many ordinary explanations such as compression, merging or a print-to-PDF step.

Caveats

  • The figures cover 71 files. Larger than a handful, but still a sample of what was submitted, not of all PDFs in the world.
  • The statistics describe files HTPBE? analysed. They are not a judgement of the quality or trustworthiness of OpenText Exstream.
  • Submitted files lean towards documents that someone wanted checked, so rates here can sit higher than in everyday document flows.
  • Metadata can be rewritten by anyone, so a producer name on its own is never treated as proof either way.
Read a PDF’s metadata for freeAll tool statisticsCreator vs Producer explainedPDF metadata fields referenceCheck PDFs through the API

Role in the workflow

How OpenText Exstream shows up in metadata

Every PDF carries a Creator (the application that produced the original document) and a Producer (the engine that wrote the PDF). The same tool can appear in either slot, with very different modification profiles.

CAs Creator · 96%
As Producer · 4%P
CAs Creator
  • Share of appearances
    96%
  • Modification rate
    38%
  • Avg file size
    404 KB
PAs Producer
  • Share of appearances
    4%
  • Modification rate
    100%
  • Avg file size
    360 KB

How to read this

The Creator slot typically reflects where a document started life. The Producer slot reflects whatever wrote the final file, which is not always the same software.

A higher modification rate as Producer than as Creator usually means the tool is acting as a re-saver on documents that originated elsewhere. A higher rate as Creator points to fragile workflows around the original authoring app.

Name fingerprints

Also goes by

Different version strings and spellings observed for OpenText Exstream in the wild. All are merged into the same canonical profile.

OpenText Exstream Version 16.6.1 64-bit36.6%
OpenText Exstream Version 23.2.0 64-bit11.3%
OpenText Exstream Version 16.6.70 64-bit9.9%
OpenText Exstream Version 16.4.0 64-bit7.0%
OpenText Exstream Version 24.1.1 64-bit5.6%
OpenText Exstream Version 9.0.120 64-bit5.6%
OpenText Exstream Version 25.3.0 64-bit4.2%
OpenText Exstream Version 20.4.2 64-bit4.2%
OpenText Exstream Version 23.1.0 64-bit4.2%
OpenText Exstream Version 16.4.6 64-bit4.2%
OpenText Exstream Version 16.3.0 64-bit2.8%
OpenText Exstream Version 16.6.60 64-bit1.4%
OpenText Exstream Version 16.6.20 64-bit1.4%
OpenText Exstream 16.61.4%

Why variants matter

The same tool publishes itself under 14 different metadata strings – version bumps, locale tags, build IDs. We canonicalize them so the corpus reflects one identity, not noise.

Most common
OpenText Exstream Version 16.6.1 64-bit
36.6% of appearances
Variant spread
14 distinct strings
Long-tail share: 63.4%
Observed range
08.02.2024 → 01.10.2026

Distributions

What ships alongside OpenText Exstream

The PDF versions OpenText Exstream writes when acting as Producer, and the other tools that appear in the same documents.

PDF versions written

Most output is PDF 1.3 (100% of files where OpenText Exstream is the Producer).

PDF 1.3100.0%

Common Producers when OpenText Exstream is the Creator

macOS Print to PDF writes 1% of these files – read this row as ‘what these documents most often pass through on the way out’.

macOS Print to PDF1.5%
iText1.5%
pikepdf 10.11.01.5%

Common Creators when OpenText Exstream is the Producer

Commonwealth Bank sits upstream in 67% of cases — read this row as “what kinds of documents end up routed through OpenText Exstream.”

Commonwealth Bank66.7%
Transactional Document Engine33.3%

Related profiles

Tools you’ll see next to OpenText Exstream

Other tools that frequently share metadata with OpenText Exstream in the same documents. Each card links to its own forensic profile.

P1% co-occurrence
macOS Print to PDF
Corpus share3.4%
Mod rate62%
P1% co-occurrence
iText
Corpus share7.3%
Mod rate48%
P1% co-occurrence
pikepdf 10.11.0
Corpus share<0.01%
Mod rate100%
C3% co-occurrence
Commonwealth Bank
Corpus share0.01%
Mod rate100%
C1% co-occurrence
Transactional Document Engine
Corpus share<0.01%
Mod rate100%

Long tail

Notable observations

Smaller cuts of the OpenText Exstream corpus – useful context, but treat each row as a single data point rather than a strong signal.

Embedded JavaScript
1%

Of files contain JavaScript code

Embedded files
4%

Of files have attachments inside

Avg pages per document
3.5
Oldest observed
08.02.2024 — almost 3 years ago

FAQ

OpenText Exstream in PDF metadata: common questions

What is OpenText Exstream?

OpenText Exstream is a PDF-handling tool that writes its name into the Creator or Producer field of the PDFs it generates or re-saves.

Why does OpenText Exstream appear in the metadata of a PDF?

A PDF can record the software that created it (Creator) and the software that last wrote the file out (Producer). When OpenText Exstream generated the file, or re-saved it, it can leave its name in one of those fields. The field is filled in by software, not checked by anyone, so it is a hint about the file’s history rather than a guarantee.

Does OpenText Exstream in the metadata mean the PDF was edited?

No. A producer name alone proves nothing about whether a document was changed. Many OpenText Exstream files are original output, and a file that was edited can name any tool at all. What matters is the whole picture: how the file is built, how its dates and structure line up, and whether the Creator and Producer fit together.

How should I read the OpenText Exstream statistics?

The figures describe the 71 files in the HTPBE? corpus that list OpenText Exstream as Creator or Producer. The modification rate is the share of those files that carry modification markers. It is a base rate for this particular set of files, not a property of OpenText Exstream and not a prediction for any single document.

Can I compare OpenText Exstream with other tools using these numbers?

Only loosely. The corpus consists of PDFs people chose to submit for checking, which skews towards documents someone had a reason to doubt. A tool popular for legitimate bulk output can still show a high rate here, and a rarely seen tool can show an extreme rate from a handful of files. These pages are not a quality ranking of the tools themselves.

How do I check a PDF that lists OpenText Exstream?

Upload it to HTPBE? for a modification check, or open it in the free PDF Metadata Viewer to see the Creator, Producer and dates stored in the file. The same check is available through the HTPBE? API.

Secure your workflow

Create your account – check PDFs on the web or with an API key, both ready on signup.
No sales call. Cancel any time.

Start Free – Close the Structural Fraud GapSee Pricing
Read API Docs →