Welcome to the WPML Support. The warning appears to come from your security plugin detecting a change in a WPML-generated file inside wp-content/uploads/wpml/.
Since this is a text file (changelog.txt) in the uploads directory and not a core WPML plugin file, this is usually expected behavior after plugin updates or background WPML processes.
It does not immediately indicate a problem or malware infection.
Hi Lucas,
this is not a text file, you need to decode it to see more.
Since when wpml created a file like this in che uploads/wmpl folder? (which contains only this file)
attached the file (renamed txt > png to upload it)