Hello
Is the file shown as hidden?
Try to check the issue in clean boot environment.
How to perform a clean boot in Windows - Microsoft Support
Try to audit the desktop so that we could capture the process who created the file. It is applied to client version, too.
How to enable file and folder access auditing in Windows Server (manageengine.com)