One addition to this:
We’re already aware (previous to this report) that IIS 7.5 is EOL but currently can’t / won’t add the date to the mentioned file for the same reason mentioned in https://community.greenbone.net/t/missing-windows-version-in-os-end-of-life-detection/4837/2:
Windows 7 and Windows Server 2008 are covered by the Extended Security Updates (ESU) program of Microsoft and we currently can’t discern between systems covered by ESU and the ones which are not covered (especially remotely) which would mean that we would report a false positive for systems covered by ESU.
Edit: Fixed link