You have created a Deny rule using the File Info condition in Least Privilege Manager for WinSCP Setup where you wish to deny running version 18.104.22.16886 and any other lower versions. However, all WinSCP Setup versions lower than 22.214.171.12487 are still able to be run after applying rule.
The file Info deny rule was created by browsing for a reference file and selecting the WinSCP Setup EXE file (WinSCP-5.17.10-Setup.exe). However, the PRODUCT name contains trailing spaces that are not visible unless you highlight the Product name field, which is why the issue is occurring. If you look in the screenshot below you will see that the Product name is really “WinSCP ”, and not just “WinSCP”
Also, not all versions of WinSCP Setup EXE have a file name:
To work around these issues, you can replace the FILE Info name with a wildcard, and add a wildcard to the PRODUCT name “WinSCP” to account for the trailing spaces.