This one is a bit hard to identify because it's built on top of their SSH library which changes names from time to time, so for WinSSHD 4.x it was identified via the vendor ID string "sshlib: WinSSHD 4.yy" while for WinSSHD 5.x it was identified via the vendor ID string "FlowSsh: WinSSHD 5.xx". In theory we could handle this by skipping the library name and looking further inside the string for the "WinSSHD" identifier, but then there's another version that uses "SrSshServer" instead of inSSHD", and there's also a "GlobalScape" ID used by CuteFTP (which means that CuteFTP might have finally fixed their buggy tation of SSH by using someone else's). As a result we can see any of "sshlib: <vendor>" or "FlowSsh: <vendor>", which we use as the identifier.