Because WinPKG.exe has the authority to install other software and manipulate programs, it is a high-value target for malware camouflage. Malware Disguise:

: It turns a folder of application files into a single, stand-alone executable installer. Key Features Portability

Once identified, security teams should extract the hash (MD5/SHA256) of the file and create a signature for their Endpoint Detection and Response (EDR) platform to block all future instances.