Found .usermin/changepass/recovery in a strange location

Debian Linux 11 REQUIRED
Virtualmin 7.5 REQUIRED

Hello people, hope someone can give me a hand with this, I have a folder named “files” for uploading pdf’s with a single php script and I just noticed that it inside this folder there’s a .usermin/changepass with an empty recovery file with a size of 0 like the ones in “homes”… It’s the only folder/file of that sort that I have found under public_html and it seems it’s been there a long time, I’m worried it could have been some sort of attack, any info on the matter will be mostly appreciated!