Dotnet PE binary cataloger is detecting false positives

[wagoodman]

What happened:
Originally reported https://github.com/anchore/vulnerability-match-exclusion-database/issues/240#issuecomment-2489341204

syft -q ~/Downloads/jruby-exec.zip 
NAME   VERSION  TYPE     
JRuby  1.0      dotnet  

What you expected to happen:
Jruby is not a .NET application, thus should not be detected as so (should find no packages)

Steps to reproduce the issue:
Download jruby binary and scan it with syft.

Anything else we need to know?:
Proposed fix: scan the PE binary for indications of the .NET framework.
Partial fix implemented: https://github.com/anchore/syft/compare/filter-dotnet-pe

[osiagwe]

Hey Alex! CBP also went on to note that the same issue affects jrubyw.exe.