WinSCP 6.5 creates suspicious files in Windows-Folder

Hello,
I was surprised when my endpoint protection alerted me about a trojan file named is-IRMP3.exe in C:\Windows.
When I checked the folder, I see this 3 files:
They have the same date as the day WinSCP 6.5 was installed on the machine.
The content of the is-IRMP3.lst and exe files are attached.
What exactly happened here?

The installer needed to upgrade DragExt64.dll shell extension. As the extension was already loaded (and thus locked), it could not be replaced at the time of the installation. As the replacement was not critical, the installer delayed the replacement until the next Windows restart (instead of forcing you to restart immediately). Those files are support files for the replacement and registration. The .lst file actually even says that. They should get removed the next time you restart your computer.

Thanks for the information. But where does the weird name IRMP3 come from? what does it mean? why is this not named something more like winscp?