## Document Header
SPDXVersion: SPDX-2.1
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: ACME-INFUSION-1.0-SBOM-DRAFT
DocumentNamespace: http://www.hospitalproducts.acme
Creator: Organization: ACME-Hospital-Division()
Created: 2022-08-30T21:23:34Z
CreatorComment: <text>Draft ACME INFUSION PoC II SBOM document in SPDX format. Unofficial content for demonstration purposes only</text>
## Packages
## 2.4 Primary Component (described by the SBOM)
PackageName: INFUSION
SPDXID: SPDXRef-52834382-fdc9-eac6-9f15-0d825cef3fd2
PackageComment: <text>PURL is pkg:supplier/ACME/INFUSION@1.0  </text>
ExternalRef: PACKAGE-MANAGER purl pkg:supplier/ACME/INFUSION@1.0
PackageVersion: 1.0
PackageSupplier: Organization: ACME
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-52834382-fdc9-eac6-9f15-0d825cef3fd2
Relationship: SPDXRef-52834382-fdc9-eac6-9f15-0d825cef3fd2 CONTAINS NONE
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: true
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageFileName: INFUSION.iso
PackageChecksum: SHA256: fef43a44b93405dfda82bd6701dc435f76ad77e3c88c06033d7ccc5ddda86d44
## 2.4 All-Levels Components
##
PackageName: Windows Embedded Standard 7
SPDXID: SPDXRef-e8003a4b-827b-6894-9aff-8c7dec1883b7
PackageComment:  <text>PURL is pkg:supplier/Microsoft/Windows%20Embedded%20Standard%207@6.1.7601  </text>
ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Microsoft/Windows%20Embedded%20Standard%207@6.1.7601	
PackageVersion: 6.1.7601
PackageSupplier: Organization: Microsoft
Relationship: SPDXRef-52834382-fdc9-eac6-9f15-0d825cef3fd2 CONTAINS SPDXRef-e8003a4b-827b-6894-9aff-8c7dec1883b7
Relationship: SPDXRef-e8003a4b-827b-6894-9aff-8c7dec1883b7 CONTAINS NOASSERTION	
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: true
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageFileName: Windows7-Embedded.pkg
PackageChecksum: SHA256: aa09280b2fdceb695e71e2f1c7138ca5d9ab2788a4eda0adcb2c5baba65b9491
## 2.4 All-Levels Components
##
PackageName: Windows Embedded Standard 7 with SP1 patches
SPDXID: SPDXRef-ea22ee47-2f6d-545f-f2f0-5c602afef7e5
PackageComment:  <text>PURL is pkg:supplier/Microsoft/Windows%20Embedded%20Standard%207%20with%20SP1%20patches@3.0  </text>
ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Microsoft/Windows%20Embedded%20Standard%207%20with%20SP1%20patches@3.0	
PackageVersion: 3.0
PackageSupplier: Organization: Microsoft
Relationship: SPDXRef-52834382-fdc9-eac6-9f15-0d825cef3fd2 CONTAINS SPDXRef-ea22ee47-2f6d-545f-f2f0-5c602afef7e5
Relationship: SPDXRef-ea22ee47-2f6d-545f-f2f0-5c602afef7e5 CONTAINS NOASSERTION	
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: true
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageFileName: MS-Windows-7-tr.iso
PackageChecksum: SHA256: b8d1d473d3979d075c7f46f51a0e1276a56a7f5881ca619beb493bd38ebdf10d
## 2.4 All-Levels Components
##
PackageName: SQL 2005 Express
SPDXID: SPDXRef-912c569e-eef4-33e2-dfaa-014e9d4b0a1f
PackageComment:  <text>PURL is pkg:supplier/Microsoft/SQL%202005%20Express@9.00.5000.00,SP4  </text>
ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Microsoft/SQL%202005%20Express@9.00.5000.00,SP4	
PackageVersion: 9.00.5000.00,SP4
PackageSupplier: Organization: Microsoft
Relationship: SPDXRef-52834382-fdc9-eac6-9f15-0d825cef3fd2 CONTAINS SPDXRef-912c569e-eef4-33e2-dfaa-014e9d4b0a1f
Relationship: SPDXRef-912c569e-eef4-33e2-dfaa-014e9d4b0a1f CONTAINS NOASSERTION	
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: true
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
FileName: SQL-2005-Express.msi
FileChecksum: SHA256: 8dc52671c9828e3c480de384488298f58b4b21df3fe975175ec6a3ab90a0988c
## 2.4 All-Levels Components
##
PackageName: .Net Frame Work
SPDXID: SPDXRef-cf9b4ecd-2b41-c035-3c09-cbbb44549a46
PackageComment:  <text>PURL is pkg:supplier/Microsoft/.Net%20Frame%20Work@V2.1.21022.8,SP2  </text>
ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Microsoft/.Net%20Frame%20Work@V2.1.21022.8,SP2	
PackageVersion: V2.1.21022.8,SP2
PackageSupplier: Organization: Microsoft
Relationship: SPDXRef-e8003a4b-827b-6894-9aff-8c7dec1883b7 CONTAINS SPDXRef-cf9b4ecd-2b41-c035-3c09-cbbb44549a46
Relationship: SPDXRef-cf9b4ecd-2b41-c035-3c09-cbbb44549a46 CONTAINS NOASSERTION	
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: true
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageFileName: Windows-NET-Framework.exe
PackageChecksum: SHA256: 90e5f3aa89a8e781dc626e159384c113fbb27a6604ba28442d2d2794d00e6064
## 2.4 All-Levels Components
##
PackageName: Java 8
SPDXID: SPDXRef-9f634188-579e-0cf0-4dc3-f3c0cdf09035
PackageComment:  <text>PURL is pkg:supplier/Oracle/Java%208@v1.8  </text>
ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Oracle/Java%208@v1.8	
PackageVersion: v1.8
PackageSupplier: Organization: Oracle
Relationship: SPDXRef-52834382-fdc9-eac6-9f15-0d825cef3fd2 CONTAINS SPDXRef-9f634188-579e-0cf0-4dc3-f3c0cdf09035
Relationship: SPDXRef-9f634188-579e-0cf0-4dc3-f3c0cdf09035 CONTAINS NOASSERTION	
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: true
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageFileName: java-8.3.1-re.exe
PackageChecksum: SHA256: f5acd1e5a24c07a3297e246ebe2559b4feb2606df039ab8e6fac803eceb12688
## 2.4 All-Levels Components
##
PackageName: Tomcat 9
SPDXID: SPDXRef-f747f551-75f3-d680-e966-1cb632008728
PackageComment:  <text>PURL is pkg:supplier/Apache%20Foundation/Tomcat%209@v9.037  </text>
ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Apache%20Foundation/Tomcat%209@v9.037	
PackageVersion: v9.037
PackageSupplier: Organization: Apache Foundation
Relationship: SPDXRef-9f634188-579e-0cf0-4dc3-f3c0cdf09035 CONTAINS SPDXRef-f747f551-75f3-d680-e966-1cb632008728
Relationship: SPDXRef-f747f551-75f3-d680-e966-1cb632008728 CONTAINS NOASSERTION	
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: true
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageFileName: apache-tomcat-8.5.69.zip
PackageChecksum: SHA256: f4eb7a532b45b5df12c09c0104b2a136707f8b05a59d1b94930b9e147b93e260
## 2.4 All-Levels Components
##
PackageName: Spring Framework
SPDXID: SPDXRef-92c000a9-762e-4308-d2b4-11a2b9198c24
PackageComment:  <text>PURL is pkg:supplier/Apache%20Foundation/Spring%20Framework@v4.7  </text>
ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Apache%20Foundation/Spring%20Framework@v4.7	
PackageVersion: v4.7
PackageSupplier: Organization: Apache Foundation
Relationship: SPDXRef-9f634188-579e-0cf0-4dc3-f3c0cdf09035 CONTAINS SPDXRef-92c000a9-762e-4308-d2b4-11a2b9198c24
Relationship: SPDXRef-92c000a9-762e-4308-d2b4-11a2b9198c24 CONTAINS NOASSERTION	
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: true
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
FileName: spring-instrument.jar
FileChecksum: SHA256: ea8436f23b06d4649626f6a87a65e0128d6fe674d9a180d800737555adbae829