logologo
  • How it works
  • Why It Matters
  • Statistics
  • Pricing
  • API
logologo
  • How it works
  • Why It Matters
  • Statistics
  • Pricing
  • API
HTPBE?

Structural PDF tamper detection API. Catches edits your KYC stack misses.

Product

  • How It Works
  • Why It Matters
  • Use Cases
  • Pricing

Developers

  • API Reference
  • GitHub/docs
  • Changelogv2.23.1

Resources

  • FAQ
  • Blog
  • Comparisons
  • Legal & Imprint

© 2024–2026 TMI Iurii Rogulia · VAT ID: FI29845875 · Made in Finland 🇫🇮

Status

Algorithm v2.23.1

Tool profile

macOS Print to PDF

macOS Print to PDF appears on both legitimate first-generation output and downstream re-save flows — context (the other tool on the same document) is what flips the signal.

Back to all statistics
Forensic verdict

Mixed signal

Based on 747 appearances across the HTPBE? corpus.

Modification rate
64%+16pp above baseline
Corpus baseline: 48%
Total appearances
747
3.6% of corpus
Modification rate
64%
+16pp above baseline
Role split
0%C/100%P
Creator vs Producer share of appearances

Corpus profile

How macOS Print to PDF shows up in HTPBE? corpus

macOS Print to PDF is the system-level PDF generator built into macOS’s print pipeline (the "Save as PDF" option in any Print dialog). Almost every Mac-originated PDF that did not come from a dedicated authoring app passes through this path.

macOS Print to PDF appears overwhelmingly on Mac-authored documents and is among the highest-volume producers in the HTPBE? corpus. It is a low-signal producer for tampering — the document was rendered by a Mac in one pass.

The signal
macOS Print to PDF appears overwhelmingly on Mac-authored documents and is among the highest-volume producers in the HTPBE? corpus.

Role in the workflow

How macOS Print to PDF shows up in metadata

Every PDF carries a Creator (the application that produced the original document) and a Producer (the engine that wrote the PDF). The same tool can appear in either slot, with very different modification profiles.

CAs Creator · 0%
As Producer · 100%P
CAs Creator
  • Usage
    0
  • Modification rate
    0%
PAs Producer
  • Usage
    747
  • Modification rate
    64%
  • Avg file size
    965 KB

How to read this

The Creator slot typically reflects where a document started life. The Producer slot reflects whatever wrote the bytes — and is the field that gets overwritten when a PDF is opened, edited, and saved by a downstream tool.

A higher modification rate as Producer than as Creator usually means the tool is acting as a re-saver on documents that originated elsewhere. A higher rate as Creator points to fragile workflows around the original authoring app.

Name fingerprints

Also goes by

Different version strings and spellings observed for macOS Print to PDF in the wild. All are merged into the same canonical profile.

macOS Version 26.3.1 (a) (Build 25D771280a) Quartz PDFContext34.3%
macOS Version 12.7.6 (Build 21H1320) Quartz PDFContext, AppendMode 1.116.7%
macOS Version 12.7.6 (Build 21H1320) Quartz PDFContext14.6%
macOS Version 26.2 (Build 25C56) Quartz PDFContext, AppendMode 1.19.4%
macOS Version 15.3.2 (Build 24D81) Quartz PDFContext7.4%
macOS Version 10.15.7 (Build 19H1922) Quartz PDFContext7.2%
macOS Version 26.3.1 (Build 25D2128) Quartz PDFContext1.1%
macOS Version 15.7.1 (Build 24G231) Quartz PDFContext0.5%
macOS Version 13.3.1 (a) (Build 22E772610a) Quartz PDFContext, AppendMode 1.10.5%
macOS Version 26.2 (Build 25C56) Quartz PDFContext0.5%
macOS Version 26.1 (Build 25B78) Quartz PDFContext0.4%
macOS Version 15.7.4 (Build 24G517) Quartz PDFContext0.4%
macOS Version 26.4.1 (Build 25E253) Quartz PDFContext0.4%
Mac OS X 10.10.5 Quartz PDFContext0.4%
macOS Version 14.6 (Build 23G80) Quartz PDFContext, AppendMode 1.10.3%
macOS Version 14.8.4 (Build 23J319) Quartz PDFContext0.3%
macOS 版本26.3(版号25D125) Quartz PDFContext0.3%
macOS Version 14.5 (Build 23F79) Quartz PDFContext0.3%
macOS Version 10.15.4 (Build 19E287) Quartz PDFContext0.3%
macOS Version 15.3 (Build 24D2059) Quartz PDFContext0.3%
macOS Version 26.2 (assemblage 25C56) Quartz PDFContext0.3%
macOS Version 15.7.3 (Build 24G419) Quartz PDFContext0.3%
macOS Version 15.7.4 (assemblage 24G517) Quartz PDFContext0.3%
macOS Version 26.1 (Build 25B78) Quartz PDFContext, AppendMode 1.10.3%
macOS Version 14.6.1 (Build 23G93) Quartz PDFContext, AppendMode 1.10.1%
macOS Version 26.0.1 (Build 25A362) Quartz PDFContext0.1%
macOS Version 15.6.1 (Build 24G90) Quartz PDFContext, AppendMode 1.10.1%
macOS Version 15.6.1 (Build 24G90) Quartz PDFContext0.1%
macOS Versión 13.7.8 (Compilación 22H730) Quartz PDFContext0.1%
macOS Versión 13.5.1 (Compilación 22G90) Quartz PDFContext0.1%
macOS Версия 14.5 (Выпуск 23F79) Quartz PDFContext0.1%
macOS 10.15.719H15 Quartz PDFContext; modified using OpenPDF 1.3.300.1%
macOS Version 10.16 (Build 21H1320) Quartz PDFContext0.1%
macOS Version 12.5 (Build 21G72) Quartz PDFContext, AppendMode 1.10.1%
macOS Version 14.0 (Build 23A344) Quartz PDFContext0.1%
macOS Version 15.6 (Build 24G84) Quartz PDFContext0.1%
Mac OS X 10.6.7 Quartz PDFContext0.1%
macOS Version 26.3 (Build 25D125) Quartz PDFContext0.1%
macOS Version 15.6 (assemblage 24G84) Quartz PDFContext, AppendMode 1.10.1%
macOS Version 15.4 (Build 24E248) Quartz PDFContext0.1%
macOS Version 15.7.3 (Build 24G419) Quartz PDFContext, AppendMode 1.10.1%
macOS Version 13.5 (Build 22G74) Quartz PDFContext, AppendMode 1.10.1%
macOS Version 14.2.1 (Build 23C71) Quartz PDFContext0.1%
macOS Version 15.4.1 (Build 24E263) Quartz PDFContext0.1%
macOS Version 15.2 (Build 24C101) Quartz PDFContext0.1%
macOS Version 15.5 (Build 24F74) Quartz PDFContext0.1%
macOS Version 15.5 (Build 24F74) Quartz PDFContext, AppendMode 1.10.1%
macOS Version 14.3.1 (Build 23D60) Quartz PDFContext0.1%
macOS Version 15.6 (Build 24G84) Quartz PDFContext, AppendMode 1.10.1%
macOS Version 26.5 (Build 25F71) Quartz PDFContext0.1%

Why variants matter

The same tool publishes itself under 50 different metadata strings — version bumps, locale tags, build IDs. We canonicalize them so the corpus reflects one identity, not noise.

Most common
macOS Version 26.3.1 (a) (Build 25D771280a) Quartz PDFContext
34.3% of appearances
Variant spread
50 distinct strings
Long-tail share: 65.7%
Observed range
27 Apr 2011 → 21 May 2026

Distributions

What ships alongside macOS Print to PDF

The PDF versions macOS Print to PDF writes when acting as Producer, and the other tools that appear in the same documents.

PDF versions written

Most output is PDF 1.3 (88% of files where macOS Print to PDF is the Producer).

PDF 1.388.4%
PDF 1.710.7%
PDF 1.60.6%
PDF 1.40.3%
PDF 1.50.1%

Common Creators when macOS Print to PDF is the Producer

Preview sits upstream in 22% of cases — read this row as “what kinds of documents end up routed through macOS Print to PDF.”

Preview22.1%
PandaDoc19.9%
ActiveReports19.1%
Aspose10.6%
Microsoft Word9.8%
Chrome (Print to PDF)8.4%
TCPDF8.3%
Pages1.1%
Adobe Acrobat0.6%
Designer 6.50.2%

Related profiles

Tools you’ll see next to macOS Print to PDF

Other tools that frequently share metadata with macOS Print to PDF in the same documents. Each card links to its own forensic profile.

C19% co-occurrence
Preview
Appearances145
Mod rate93%
C17% co-occurrence
PandaDoc
Appearances130
Mod rate5%
C17% co-occurrence
ActiveReports
Appearances549
Mod rate100%
C9% co-occurrence
Aspose
Appearances870
Mod rate39%
C9% co-occurrence
Microsoft Word
Appearances2,124
Mod rate81%

Long tail

Notable observations

Smaller cuts of the macOS Print to PDF corpus — useful context, but treat each row as a single data point rather than a strong signal.

Embedded JavaScript
1

Files containing JavaScript code

Pages parsed
6,381
Oldest observed
27 Apr 2011 — about 15 years ago

Secure your workflow

Create your account — API key on signup, free test environment on every plan.
From $15/mo. No sales call. Cancel any time.

Start free — close the structural fraud gapSee pricing
Read API docs →