okay so i downloaded a config but i forgot the run the program to check the config for a filedropper i got infected
long story short it came back as a miniclip config that was infected
i went back to the users thread but he deleted so i have no idea what his username is but i managed to copy the link of the thread.