The
Quote from man page:
*
in quotes should not work as mask. So I believe the problem is not on WinSCP side.
Quote from man page:
One can remove the special meaning of '?', '*' and '[' by preceding
them by a backslash, or, in case this is part of a shell command line,
enclosing them in quotes