csl. IPA Analysis

Explore package contents, native binaries, and declarations for this build.

Inside the IPA

csl.

CSL Mobile Limitedcom.hkcsl.one2free

← App page
Latest analyzed IPAv7.57
Build 8352Record 8911951442026-09-22

A newer version is recorded: v7.58. Its file inventory is not available yet. This report automatically uses the newest build with an inventory.

Uncompressed files166.1 MBSum of recorded file sizes
Recorded IPA size103.0 MBSelected build · archive size
Files inventoried1,8046 file categories
Embedded libraries23Frameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed
Images & resources76.7 MB46.2% Frameworks & libraries65.0 MB39.1% Other files16.2 MB9.7% App executable7.1 MB4.3% Signing & receipts864.0 KB0.5% Configuration296.7 KB0.2%

All 1,804 file sizes included. Select a category to explore its files. Categories are inferred from paths; archive and installed sizes differ.

Bundle structure

Space by folder

Top level
App root93.7 MB
954 files56.4% of measured size
Frameworks/65.2 MB
565 files39.2% of measured size
PlugIns/5.6 MB
12 files3.4% of measured size
Main.storyboardc/749.0 KB
231 files0.4% of measured size
Other folders907.0 KB
42 files0.5% of measured size

Folders inside the app bundle, plus archive level files. “App root” groups files directly inside the .app.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

File / pathCategorySizeShare
NotoSansSC.ttfPayload/csl.app/NotoSansSC.ttf
NotoSansSC.ttf		Images & resources16.9 MB10.2%
linphonePayload/csl.app/Frameworks/linphone.framework/linphone
Frameworks/linphone.framework/linphone		Frameworks & libraries16.0 MB9.6%
Inter.ttcPayload/csl.app/Inter.ttc
Inter.ttc		Other files12.6 MB7.6%
NotoSansTC.ttfPayload/csl.app/NotoSansTC.ttf
NotoSansTC.ttf		Images & resources11.4 MB6.8%
RealmPayload/csl.app/Frameworks/Realm.framework/Realm
Frameworks/Realm.framework/Realm		Frameworks & libraries8.3 MB5.0%
cslPayload/csl.app/csl
csl		App executable7.1 MB4.3%
Assets.carPayload/csl.app/Frameworks/SmartLine86EasySDK.framework/Assets.car
Frameworks/SmartLine86EasySDK.framework/Assets.car		Frameworks & libraries5.3 MB3.2%
belle-sipPayload/csl.app/Frameworks/belle-sip.framework/belle-sip
Frameworks/belle-sip.framework/belle-sip		Frameworks & libraries4.5 MB2.7%
dont_wait_too_long.mkvPayload/csl.app/Frameworks/linphone.framework/dont_wait_too_long.mkv
Frameworks/linphone.framework/dont_wait_too_long.mkv		Frameworks & libraries3.5 MB2.1%
mediastreamer2Payload/csl.app/Frameworks/mediastreamer2.framework/mediastreamer2
Frameworks/mediastreamer2.framework/mediastreamer2		Frameworks & libraries3.4 MB2.1%
belcardPayload/csl.app/Frameworks/belcard.framework/belcard
Frameworks/belcard.framework/belcard		Frameworks & libraries2.6 MB1.6%
Assets.carPayload/csl.app/PlugIns/CSL WidgetExtension.appex/Assets.car
PlugIns/CSL WidgetExtension.appex/Assets.car		Images & resources2.5 MB1.5%
notificationServiceExtensionCSLProdPayload/csl.app/PlugIns/notificationServiceExtensionCSLProd.appex/notificationServiceExtensionCSLProd
PlugIns/notificationServiceExtensionCSLProd.appex/notificationServiceExtensionCSLProd		Other files2.4 MB1.5%
csl1010-loading.gifPayload/csl.app/csl1010-loading.gif
csl1010-loading.gif		Images & resources2.2 MB1.3%
ZXingPayload/csl.app/Frameworks/ZXing.framework/ZXing
Frameworks/ZXing.framework/ZXing		Frameworks & libraries1.4 MB0.9%
D47EF5BD-D5BF-3216-9E52-E1A6359C80C8.bcsymbolmapPayload/csl.app/Frameworks/Realm.framework/D47EF5BD-D5BF-3216-9E52-E1A6359C80C8.bcsymbolmap
Frameworks/Realm.framework/D47EF5BD-D5BF-3216-9E52-E1A6359C80C8.bcsymbolmap		Frameworks & libraries1.3 MB0.8%
tutorial_4_en.pngPayload/csl.app/tutorial_4_en.png
tutorial_4_en.png		Images & resources1.3 MB0.8%
bctoolboxPayload/csl.app/Frameworks/bctoolbox.framework/bctoolbox
Frameworks/bctoolbox.framework/bctoolbox		Frameworks & libraries1.3 MB0.8%
tutorial_4_tc.pngPayload/csl.app/tutorial_4_tc.png
tutorial_4_tc.png		Images & resources1.3 MB0.8%
504535E1-E864-3F27-BB01-6CEB72BD0042.bcsymbolmapPayload/csl.app/Frameworks/Realm.framework/504535E1-E864-3F27-BB01-6CEB72BD0042.bcsymbolmap
Frameworks/Realm.framework/504535E1-E864-3F27-BB01-6CEB72BD0042.bcsymbolmap		Frameworks & libraries1.2 MB0.8%

Showing the 20 largest files of 1,804. Enable JavaScript to search and browse.

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

26 binaries · 26 slices
arm64No encrypted slicesParsed in 8.718s · 2026-10-30

Select a Mach O file

Choose a binary and architecture. Detailed tables load on demand, not with the initial page.

Integer fields use hexadecimal, without locale separators or loss of 64 bit precision. JSON downloads preserve the original numeric data. Tables retain up to 10000 records each, with totals and truncation markers. Signing data is descriptive; trust and code page hashes are not verified. Not disassembly.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

23 embedded libraries

No engine identification recorded for this build. That does not mean the app has no game engine or runtime.

linphone

25.1 MB

Framework

Realm

11.0 MB

Other · 5.2.0

belle-sip

4.5 MB

Framework

belcard

2.6 MB

Framework

ZXing

1.4 MB

Other · 1.4.0

bctoolbox

1.3 MB

Framework

lime

1021.3 KB

Framework

belr

717.4 KB

Framework

Show 11 more libraries

libswift_Concurrency.dylib

407.3 KB

Dynamic library

mswebrtc

374.1 KB

Framework

ortp

293.9 KB

Framework

bctoolbox-ios

79.1 KB

Framework

linphonetester

55.4 KB

Framework

msopenh264

55.4 KB

Framework

mscodec2

55.3 KB

Framework

mssilk

55.3 KB

Framework

msamr

55.3 KB

Framework

Framework sizes include their recorded resources, not just the executable. Library presence does not prove active use. A “+” indicates some constituent sizes are missing.

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded
Tracking declared
No
Permission descriptions
NSLocationAlwaysUsageDescription
This will let you find the nearest shop around you.
NSCameraUsageDescription
This will let you take your profile picture.
NSPhotoLibraryAddUsageDescription
This will let you choose your profile picture from Photos.
NSMicrophoneUsageDescription
This will let others hear you during calls.
NSLocationWhenInUseUsageDescription
This will let you find the nearest shop around you.
NSFaceIDUsageDescription
This will allow you to login with Face ID.
NSLocationAlwaysAndWhenInUseUsageDescription
This will let you find the nearest shop around you.
NSContactsUsageDescription
This will let you choose your friends to message or call.
NSPhotoLibraryUsageDescription
This will let you choose your profile picture from Photos.
Tracking domains 0
[]
Accessed API types 4
[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "C56D.1",
      "1C8F.1",
      "CA92.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "0A2A.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "7D9E.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
    "NSPrivacyAccessedAPITypeReasons": [
      "35F9.1"
    ]
  }
]
Collected data types 0
[]
Additional Info.plist declarations
App transport security
{
  "NSAllowsArbitraryLoads": true,
  "NSExceptionDomains": {
    "192.168.62.154": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "hkcsl.com/roaming-coverage/": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "jpapp.hkcsl.com": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "reg.hkcsl.com": {
      "NSExceptionRequiresForwardSecrecy": false,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "rnr.hkcsl.com": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "sdeweb.hkcsl.com": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSExceptionRequiresForwardSecrecy": false,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "uat.5g.hkcsl.com": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "uat.reg.hkcsl.com": {
      "NSExceptionRequiresForwardSecrecy": false,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "uat.sdeweb.hkcsl.com": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSExceptionRequiresForwardSecrecy": false,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "uat.sdeweb.hkcsl.com/CAMW/": {
      "NSExceptionRequiresForwardSecrecy": false,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    },
    "uat1rnr.hkcsl.com": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSTemporaryExceptionAllowsInsecureHTTPLoads": true
    }
  }
}
Url schemes
[
  {
    "CFBundleTypeRole": "youthplantapngo",
    "CFBundleURLName": "com.hkcsl.one2free",
    "CFBundleURLSchemes": [
      "tapngo0915328526",
      "tapngo9249533106"
    ]
  },
  {
    "CFBundleTypeRole": "Editor",
    "CFBundleURLName": "com.hkcsl.one2free",
    "CFBundleURLSchemes": [
      "tapngo2252078821",
      "tapngo1637718557"
    ]
  },
  {
    "CFBundleURLName": "com.hkcsl.one2free",
    "CFBundleURLSchemes": [
      "CSL"
    ]
  },
  {
    "CFBundleTypeRole": "Editor",
    "CFBundleURLName": "deepLink",
    "CFBundleURLSchemes": [
      "com.hkcsl.one2free",
      "com.hkcsl.csl"
    ]
  },
  {
    "CFBundleTypeRole": "prepaid",
    "CFBundleURLName": "com.hkcsl.one2free",
    "CFBundleURLSchemes": [
      "tapngo4298160115",
      "tapngo3746258999"
    ]
  }
]
Required capabilities
[
  "arm64"
]

Static observations

3 recorded
Firebase

Firebase client configuration present

Project: api-project-241997664472. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested.

Firebase

Google Ads Enabled

Firebase project: api-project-241997664472

ATS

NSAllowsArbitraryLoads: true

The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.

Analysis record
Method
Stored static package extraction and inventory; not a live security test.
Coverage
Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times
2026-10-30 23:26:39, 2026-10-30T23:26:39.879800+00:00
Known version identifiers
184 (3 with metadata)

Browse version history on the app page →