Stocard - Rewards Cards Wallet IPA Analysis

Explore package contents, native binaries, and declarations for this build.

Inside the IPA

Stocard - Rewards Cards Wallet

Stocard GmbHStocard

← App page
Latest analyzed IPAv10.52.0
Build 1750248458Record 8756653032025-06-18

A newer version is recorded: v10.53.0. Its file inventory is not available yet. This report automatically uses the newest build with an inventory.

Uncompressed files141.1 MBSum of recorded file sizes
Recorded IPA size73.0 MBSelected build · archive size
Files inventoried5908 file categories
Embedded libraries22Frameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed
App executable33.0 MB23.4% Other files32.9 MB23.3% Images & resources26.3 MB18.6% Databases22.3 MB15.8% Frameworks & libraries13.8 MB9.8% Configuration9.8 MB7.0% Scripts2.7 MB1.9% Signing & receipts395.5 KB0.3%

All 590 file sizes included. Select a category to explore its files. Categories are inferred from paths; archive and installed sizes differ.

Bundle structure

Space by folder

Top level
App root58.5 MB
54 files41.5% of measured size
PlugIns/28.8 MB
150 files20.4% of measured size
Assets.bundle/25.5 MB
2 files18.1% of measured size
Watch/12.6 MB
58 files9.0% of measured size
Other folders15.6 MB
326 files11.1% of measured size

Folders inside the app bundle, plus archive level files. “App root” groups files directly inside the .app.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

Largest recorded package files
File / pathCategorySizeShare
StocardPayload/Stocard.app/Stocard
Stocard		App executable33.0 MB23.4%
Assets.carPayload/Stocard.app/Assets.bundle/Assets.car
Assets.bundle/Assets.car		Images & resources25.5 MB18.1%
bootstrap.realmPayload/Stocard.app/bootstrap.realm
bootstrap.realm		Databases22.3 MB15.8%
StocardWidgetExtensionPayload/Stocard.app/PlugIns/StocardWidgetExtension.appex/StocardWidgetExtension
PlugIns/StocardWidgetExtension.appex/StocardWidgetExtension		Other files9.5 MB6.8%
Notification Content ExtensionPayload/Stocard.app/PlugIns/Notification Content Extension.appex/Notification Content Extension
PlugIns/Notification Content Extension.appex/Notification Content Extension		Other files9.4 MB6.7%
StocardIntentPayload/Stocard.app/PlugIns/StocardIntent.appex/StocardIntent
PlugIns/StocardIntent.appex/StocardIntent		Other files9.4 MB6.7%
libswiftCore.dylibPayload/Stocard.app/Watch/Stocard Watch.app/PlugIns/Stocard Watch Extension.appex/Frameworks/libswiftCore.dylib
Watch/Stocard Watch.app/PlugIns/Stocard Watch Extension.appex/Frameworks/libswiftCore.dylib		Frameworks & libraries4.3 MB3.1%
Stocard Watch ExtensionPayload/Stocard.app/Watch/Stocard Watch.app/PlugIns/Stocard Watch Extension.appex/Stocard Watch Extension
Watch/Stocard Watch.app/PlugIns/Stocard Watch Extension.appex/Stocard Watch Extension		Other files3.9 MB2.8%
FBSDKCoreKitPayload/Stocard.app/Frameworks/FBSDKCoreKit.framework/FBSDKCoreKit
Frameworks/FBSDKCoreKit.framework/FBSDKCoreKit		Frameworks & libraries3.2 MB2.2%
libswiftFoundation.dylibPayload/Stocard.app/Watch/Stocard Watch.app/PlugIns/Stocard Watch Extension.appex/Frameworks/libswiftFoundation.dylib
Watch/Stocard Watch.app/PlugIns/Stocard Watch Extension.appex/Frameworks/libswiftFoundation.dylib		Frameworks & libraries2.0 MB1.4%
js-card-processing-lib-min.jsPayload/Stocard.app/js-card-processing-lib-min.js
js-card-processing-lib-min.js		Scripts1.5 MB1.0%
js-barcode-generator-databar-lib-min.jsPayload/Stocard.app/js-barcode-generator-databar-lib-min.js
js-barcode-generator-databar-lib-min.js		Scripts1.2 MB0.9%
FBSDKLoginKitPayload/Stocard.app/Frameworks/FBSDKLoginKit.framework/FBSDKLoginKit
Frameworks/FBSDKLoginKit.framework/FBSDKLoginKit		Frameworks & libraries952.2 KB0.7%
FBAEMKitPayload/Stocard.app/Frameworks/FBAEMKit.framework/FBAEMKit
Frameworks/FBAEMKit.framework/FBAEMKit		Frameworks & libraries638.9 KB0.4%
libswift_Concurrency.dylibPayload/Stocard.app/Frameworks/libswift_Concurrency.dylib
Frameworks/libswift_Concurrency.dylib		Frameworks & libraries407.3 KB0.3%
libswift_Concurrency.dylibPayload/Stocard.app/Watch/Stocard Watch.app/PlugIns/Stocard Watch Extension.appex/Frameworks/libswift_Concurrency.dylib
Watch/Stocard Watch.app/PlugIns/Stocard Watch Extension.appex/Frameworks/libswift_Concurrency.dylib		Frameworks & libraries384.8 KB0.3%
PhoneNumberMetadata.jsonPayload/Stocard.app/PhoneNumberMetadata.json
PhoneNumberMetadata.json		Configuration351.0 KB0.2%
signup_dark_background.jsonPayload/Stocard.app/JSON.bundle/signup_dark_background.json
JSON.bundle/signup_dark_background.json		Configuration336.4 KB0.2%
signup_light_background.jsonPayload/Stocard.app/JSON.bundle/signup_light_background.json
JSON.bundle/signup_light_background.json		Configuration336.3 KB0.2%
CheckoutEventLoggerKitPayload/Stocard.app/Frameworks/CheckoutEventLoggerKit.framework/CheckoutEventLoggerKit
Frameworks/CheckoutEventLoggerKit.framework/CheckoutEventLoggerKit		Frameworks & libraries255.5 KB0.2%

Showing the 20 largest files of 590. Enable JavaScript to search and browse.

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

30 binaries · 36 slices
arm64 / arm64_32 / armv7kNo encrypted slicesParsed in 7.146s · 2026-11-01

Some structures are malformed or not fully decoded. Open a slice to inspect its specific warnings; missing records are not treated as absent.

Select a Mach O file

Choose a binary and architecture. Detailed tables load on demand, not with the initial page.

Integer fields use hexadecimal, without locale separators or loss of 64 bit precision. JSON downloads preserve the original numeric data. Tables retain up to 10000 records each, with totals and truncation markers. Signing data is descriptive; trust and code page hashes are not verified. Not disassembly.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

22 embedded libraries

No engine identification recorded for this build. That does not mean the app has no game engine or runtime.

libswiftCore.dylib

4.3 MB

Dynamic library

libswiftFoundation.dylib

2.0 MB

Dynamic library

libswift_Concurrency.dylib

407.3 KB

Dynamic library

libswift_Concurrency.dylib

384.8 KB

Dynamic library

libswiftDispatch.dylib

207.6 KB

Dynamic library

libswiftsimd.dylib

205.6 KB

Dynamic library

libswiftCoreGraphics.dylib

139.7 KB

Dynamic library

Show 10 more libraries

libswiftDarwin.dylib

101.0 KB

Dynamic library

libswiftUIKit.dylib

99.3 KB

Dynamic library

libswiftos.dylib

92.9 KB

Dynamic library

libswiftSceneKit.dylib

77.0 KB

Dynamic library

libswiftObjectiveC.dylib

76.5 KB

Dynamic library

libswiftWatchKit.dylib

72.4 KB

Dynamic library

libswiftCoreLocation.dylib

72.2 KB

Dynamic library

libswiftMapKit.dylib

72.0 KB

Dynamic library

libswiftHomeKit.dylib

70.4 KB

Dynamic library

libswiftCoreFoundation.dylib

70.0 KB

Dynamic library

Framework sizes include their recorded resources, not just the executable. Library presence does not prove active use. A “+” indicates some constituent sizes are missing.

Additional scanner detections 1

Auth

Facebook Login 1.0

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded
Tracking declared
No
Non exempt encryption
Not declared
Permission descriptions
NSBluetoothAlwaysUsageDescription
Bluetooth peripherals are needed to locate you more precisely indoors
NSLocationAlwaysUsageDescription
Your location is used to show the latest offers nearby.
NSCameraUsageDescription
The camera is used to scan your cards and to take card pictures.
NSUserTrackingUsageDescription
Your data is only used to personalize your experience in Stocard - for example, exclusive offers and coupons based on your profile.
NSBluetoothPeripheralUsageDescription
Bluetooth peripherals are needed to locate you more precisely indoors
NSMicrophoneUsageDescription
This is needed to verify your identity
NSLocationWhenInUseUsageDescription
Your location is used to show the latest offers nearby.
NSLocationAlwaysAndWhenInUseUsageDescription
Your location is used to show the latest offers nearby.
NSPhotoLibraryUsageDescription
Your selected photo will be added to the card.
Tracking domains 0
[]
Accessed API types 4
[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "1C8F.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
    "NSPrivacyAccessedAPITypeReasons": [
      "35F9.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "E174.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "C617.1"
    ]
  }
]
Collected data types 0
[]
Additional Info.plist declarations
App transport security
{
  "NSAllowsArbitraryLoads": true,
  "NSExceptionDomains": {
    "akamaihd.net": {
      "NSExceptionRequiresForwardSecrecy": false,
      "NSIncludesSubdomains": true
    },
    "facebook.com": {
      "NSExceptionRequiresForwardSecrecy": false,
      "NSIncludesSubdomains": true
    },
    "fbcdn.net": {
      "NSExceptionRequiresForwardSecrecy": false,
      "NSIncludesSubdomains": true
    },
    "marktjagd.com": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSExceptionRequiresForwardSecrecy": false,
      "NSIncludesSubdomains": true
    },
    "stocard.de": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSExceptionRequiresForwardSecrecy": false,
      "NSIncludesSubdomains": true
    },
    "stocardapp.s3-external-3.amazonaws.com": {
      "NSExceptionAllowsInsecureHTTPLoads": true,
      "NSExceptionRequiresForwardSecrecy": false,
      "NSIncludesSubdomains": true
    }
  }
}
Url schemes
[
  {
    "CFBundleURLSchemes": [
      "stocard"
    ]
  },
  {
    "CFBundleURLSchemes": [
      "fb433704493366426"
    ]
  },
  {
    "CFBundleTypeRole": "Editor",
    "CFBundleURLName": "",
    "CFBundleURLSchemes": [
      "com.googleusercontent.apps.790416022025-v4q79t2r1qlq00oflcjp08rpfl9hvbma"
    ]
  }
]
Required capabilities
[
  "gamekit",
  "arm64"
]

Static observations

1 recorded
ATS

NSAllowsArbitraryLoads: true

The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.

Analysis record
Method
Stored static package extraction and inventory; not a live security test.
Coverage
Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times
2026-11-01 13:59:47, 2026-11-01T13:59:47.604739+00:00
Known version identifiers
323 (19 with metadata)

Browse version history on the app page →