MuPDF's AES-256 key had 9 bits of entropy. I reproduced it in 8.7 milliseconds.

V12 found MuPDF, Foxit, and iText generating AES-256 PDF file keys from broken randomness. I re-ran the MuPDF LCG and Foxit hash test vectors byte for byte.