The binary scan tool recognizes that some jar files differ from the officially released version.
For example, the size of $IDE_HOME\lib\commons-lang-2.4.jar is 561kb, but the official version is 256kb. And their MD5 is different.
I inspect the jar and find that there is additional jb/$$size$$ in the META-INF directory. what is this file?
Security team may think that these files are being injected with something.
I use IntelliJ IDEA Community Edition 2018.3.2 and xmlrpc-2.0.1.jar,nanoxml-2.2.3.jar,commons-lang-2.4.jar,trove4j.jar,log4j.jar and jdom.jar have this problem