Last year Unity merged with ironSource - a “mobile monetization and distribution” company that was once blacklisted by Microsoft for developing and distributing actual malware. I’d assume the tracking is done via a product brought over from that side of the business.
Why bother actually installing? Just use a packet sniffer to find the data being sent to Unity and replay it in a loop. You could probably hit somewhere in the range of 100k-1M “installs” per minute.
