EchoTrail

Unity Hub 3.22.5

by Unity Technologies Inc.installer signed by Unity Technologies SFValid

Sources: observed in the EchoTrail lab on Windows 11 on October 29, 2026.

The install

Installer
unityhubsetup-x64.exe
Installer type
nsis
Installed through
a type-detected silent switch
Install directory
C:\Program Files\Unity Hub
Launched
Unity Hub.exe
Windows
Windows 11
Date
October 29, 2026
Executables dropped
255

installer sha256 c0c2040c09da024e19cfe1713b8154c624ab1ff77f21c871c95e3a09eb2c8ccd

The lab used Unity Hub for 5 minutes, then rebooted and watched what came back.

On screen

Frames from the lab session, cropped to Unity Hub's own windows.

Unity Hub 3.22.5: First window
First window. Unity Hub license terms dialog is shown with Agree disabled until the text is scrolled to the bottom.
Unity Hub 3.22.5: First window
First window. Unity Hub license terms dialog is shown with Agree still greyed out until the text is scrolled to the bottom.

What it dropped

Executables

  • unity hub.exesigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValidran during the lab session
    C:\Program Files\Unity Hub\Unity Hub.exe
    sha256 5870de68e0329a8eafc32ff2ab1493bab75f1abdd469c3d53470f7716c59520c
  • installer.exesigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Users\lab\AppData\Local\unityhub-updater\installer.exe
    sha256 c0c2040c09da024e19cfe1713b8154c624ab1ff77f21c871c95e3a09eb2c8ccd
  • unity.exesigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValidran during the lab session
    C:\Program Files\Unity Hub\resources\unity.exe
    sha256 c7ff578a0f57143ec34f6a6567824c28cc4c2a366d2f81df3f0f4fe08efbad93
  • dxcompiler.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\dxcompiler.dll
    sha256 28a60e6aac30be02f98073c3b1b0fed81018ccff0249a6f8e5c0de6ba5a3020b
  • bouncycastle.cryptography.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\BouncyCastle.Cryptography.dll
    sha256 0b0e0e6de263d2cbeb1e6078852cea4384dec939d61d26955f0deaff068fe1c1
  • system.private.corelib.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Private.CoreLib.dll
    sha256 c7811296f83a23c4a161301c9ed79d31226575804bbf0c60386aac5473f80cd6
  • system.private.xml.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Private.Xml.dll
    sha256 bd967b08b1e837e1e665f54656dac6994d48c99d88692a56adbc6be3e0caadd3
  • vk_swiftshader.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\vk_swiftshader.dll
    sha256 76d14b495572126b5bc130a3d0ffb227c4a7596b0d49e12b3521747fd7f0f277
  • rg.exe
    C:\Program Files\Unity Hub\resources\app.asar.unpacked\node_modules\@vscode\ripgrep-win32-x64\bin\rg.exe
    sha256 22acc88307b21335cf5805fbe63585551c8fd5dd9b0b507287d93922065fa107
  • coreclr.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\coreclr.dll
    sha256 f8198223a25aafeb12ca122774a9be6881c626a6d19a4d2b46e3d55b4f03c4e5
  • d3dcompiler_47.dllsigned by CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USValid
    C:\Program Files\Unity Hub\d3dcompiler_47.dll
    sha256 2526c8d48b1a6892d5af1602c3e4a4cd625f2845f9a573227d47f5266f961e51
  • system.linq.expressions.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Linq.Expressions.dll
    sha256 578366ae64ff8c45ae08eb4e1ae7530658958f1ceb78985042bb9b7bbf10a8ca
  • ffmpeg.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\ffmpeg.dll
    sha256 2b3f7bc09c268b6548eb84a8fc0c86ab7b4c6bd065a994298d6b3318e5c2afb8
  • system.data.common.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Data.Common.dll
    sha256 b96eefa31e25b72aa4c84ac0a47920cafb32b1ec29422381a31dcbb5aca8ad50
  • system.private.datacontractserialization.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Private.DataContractSerialization.dll
    sha256 814cd84e8a4bdbff5627313829b54d22bf657e765f33cb70b05f2f823d528a47
  • system.security.cryptography.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Security.Cryptography.dll
    sha256 8a82ce107ec41d4aae1b15deb8406964dfc404e4fb1e9b4cee4e228ae76d1507
  • newtonsoft.json.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\Newtonsoft.Json.dll
    sha256 3164e2aaa8fd9bfee64b350f38f046f758ef359ce198726233493a19ca196fac
  • microsoft.diasymreader.native.amd64.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\Microsoft.DiaSymReader.Native.amd64.dll
    sha256 29465401a632be2759ed92312c8edcbaac7aa90c1eee8e7445242212e8d2bb28
  • nativeproxyhelper.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\NativeProxyHelper.dll
    sha256 115b244292fa984a152f443fe8f0443e37c203890ef9ad9f91e4b05163335911
  • system.net.http.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Net.Http.dll
    sha256 05ded99f827c32e1699878aa4b79909cd8d30cef6ff275264cfdd725e041188e
  • system.text.json.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Text.Json.dll
    sha256 40e0a045e98cd19f56db8136867eb6760e4905e6497e6698695d568403625a94
  • clrjit.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\clrjit.dll
    sha256 324808d493865c1cf15b2afeb72ffeb3f72cbb3bbc9e8e198a8ff48134ce85b6
  • dxil.dllsigned by CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=USValid
    C:\Program Files\Unity Hub\dxil.dll
    sha256 749a8d47bd06f33d959e66a92dfdd2e3e9513cb89826b2c1474d40636df6654c
  • unity.licensing.client.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\Unity.Licensing.Client.dll
    sha256 988dd5a60f712b91beadaae7531eb631c657f8dbc5941555ec4a1bc1a8009fa7
  • mscordaccore.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\mscordaccore.dll
    sha256 d1a14f4a88ab970ec5485c4094550227a6ca0babface6f060ef4ec18f01855f4
  • mscordaccore_amd64_amd64_7.0.2024.26716.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\mscordaccore_amd64_amd64_7.0.2024.26716.dll
    sha256 8a1a8e526e0cb1d0f49c24d201abc06762958e70f540a6067237f41d1b9bfc3c
  • uninstall unity hub.exe
    C:\Program Files\Unity Hub\Uninstall Unity Hub.exe
    sha256 767906197e4e6d0f05452bcd164542bc42a19825e4eef6b4df4a6fc2d0370044
  • microsoft.visualbasic.core.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\Microsoft.VisualBasic.Core.dll
    sha256 02d3b6f4de2ac6f6c3edb2834d5beaa2da983ef08b5b5765642dcdf422bad29b
  • mscordbi.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\mscordbi.dll
    sha256 be40e20a6b56d26f1217b1a8e52e1c6026cb37a17d21227432210a1bcf733d2c
  • system.reflection.metadata.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Reflection.Metadata.dll
    sha256 ce7700c0b911b11d883b08a6b2d1567c421cfeb73f449639e93bd90fca7d6b17
  • system.configuration.configurationmanager.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Configuration.ConfigurationManager.dll
    sha256 8deb5f3d78e57e5dc9a9b3b90e88ce8d3e9d05292432f58259b7bf8431b23987
  • system.directoryservices.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.DirectoryServices.dll
    sha256 20f23b2a31e31ac41ffcc33fdc2a71e5582d9aa137da7237dbccb78f49f72f2c
  • microsoft.csharp.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\Microsoft.CSharp.dll
    sha256 d0183b3e4290afa8e1f66fba0ef617378ffaff0b120fb17a9974aee3b78ef2d0
  • system.text.regularexpressions.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Text.RegularExpressions.dll
    sha256 02ab41b8b35ad052334a3a174334972eae0bbd1075885b3cd21cfa419fe4d456
  • vulkan-1.dll
    C:\Program Files\Unity Hub\vulkan-1.dll
    sha256 d734f293fe8b4e7dff36f1b46c81a94a060734f92e2a50ec6a074a0c0cda69c1
  • system.security.cryptography.pkcs.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Security.Cryptography.Pkcs.dll
    sha256 2441f7f28b653d619f2f7aedd18fee4cff6e895570b6bc8805e8b06dd9e62c52
  • system.text.encoding.codepages.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Text.Encoding.CodePages.dll
    sha256 ed4c115870289699a7e0a9045f3255e0baf4e507662777f002cb41bbb466e80b
  • system.management.dllsigned by CN=Unity Technologies SF, O=Unity Technologies SF, L=San Francisco, S=California, C=US, SERIALNUMBER=3183233, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=USValid
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Management.dll
    sha256 aa673415c47d7703557638b82cef3972ecd392a16f51477e34ee8d852df18302
  • system.linq.parallel.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.Linq.Parallel.dll
    sha256 9d5dc7ca5e2d54d94c85c1b75b98f44e63ad8f631350beac215c65578ac6b978
  • system.io.compression.native.dll
    C:\Program Files\Unity Hub\UnityLicensingClient_V1\System.IO.Compression.Native.dll
    sha256 46b2e7fe6425b82190d433c1e27c6b78009a3e68ffa24b688488628a9e4ffebf

What it talked to

Destinations

  • 3.169.202.36:443asked by unity hub.exe5 connections
  • 23.217.9.71:443asked by unity hub.exe3 connections
  • 23.215.223.138:443asked by unity hub.exe2 connections
  • 32.189.173.43:443asked by unity hub.exe2 connections
  • 34.107.172.168:443asked by unity.licensing.client.exe2 connections
  • 34.120.134.125:443asked by unity hub.exe2 connections
  • 34.160.81.0:443asked by unity hub.exe2 connections
  • 34.160.81.0:443asked by unity hub.exe2 connections
  • 34.96.110.71:443asked by unity hub.exe2 connections
  • 104.18.37.25:443asked by unity hub.exe
  • 23.215.223.138:443asked by unity.licensing.client.exe
  • 34.136.31.158:443asked by unity.licensing.client.exe
  • 34.223.181.121:443asked by unity hub.exe
  • 34.36.101.172:443asked by unity hub.exe

DNS

  • cdp.cloud.unity3d.comasked by unity.licensing.client.exe
  • api2.amplitude.comasked by unity hub.exe
  • api.lab.amplitude.comasked by unity hub.exe
  • fuvbjjlp.apicdn.sanity.ioasked by unity hub.exe
  • license.unity3d.comasked by unity.licensing.client.exe
  • public-cdn.cloud.unity3d.comasked by unity hub.exe
  • public-cdn.cloud.unity3d.comasked by unity.licensing.client.exe