The point is the browser just plays the mp4 with autoplay and looping and then people call them GIFs when they aren’t. The only time you are looking at an actual GIF file is when the quality is atrocious and the colors are messed up because it needed to be dithered.

You sure it isn’t crypto mining malware that will hide when task manager is open? Like the one described here.