EchoTrail

file-gif-save.exe

Sources: 300M+ executions observed in the wild.

Summary

GNU Image Manipulation Program Plug-In

file-gif-save.exe is the 6424th most commonly executed Windows program in EchoTrail's dataset, observed 8 times across enterprise environments. It typically runs from C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins and it is most often launched by gimp-2.8.exe.

Get this in your tools

The same record for file-gif-save.exe, by REST or as an MCP tool. Free key, no card.

Get a free key
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/file-gif-save.exe

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

6424th
most commonly executed Windows program
8
observed endpoint executions

Behavior

Top Paths

  • C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins75%
  • C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-gif-save12.5%
  • C:\Users\...12.5%

Top Hashes (SHA256)

  • 2a1c7574a5c42eb8c9348d9dba505ce49f2c88231d7ea6edd3715a39a5decd9450%
  • 6dbbc588d9608d954b4e54b028e4e08d292b1ce09091b977f32caa3e1d458b6125%
  • 1c5b3dc474de5eeedebc74475d13e11b73a6c037d4588108d7a3252cb32e2c0612.5%
  • 81a3df0305b48bab7c757aee835f6453524d147fc99dbf8ce93b02c4f200a4c812.5%

Process Ancestry

Top Grandparents

Top Parents

Ask Rocky about file-gif-save.exe

Rocky is the free chat demo. It answers from this same dataset, no account needed.

This page is the Team-tier API record for file-gif-save.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.