Inside the IPA

Zalo

Zalo Groupvn.com.vng.zingalo

← App page
Latest analyzed IPAv261101
Build 261101802Record 8940794262026-10-28
Uncompressed files267.1 MBSum of recorded file sizes
Recorded IPA size126.2 MBSelected build · archive size
Files inventoried8648 file categories
Embedded libraries31Frameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed

All 864 file sizes included. Select a category to explore its files. Categories are inferred from paths; archive and installed sizes differ.

Bundle structure

Space by folder

Top level
App root181.6 MB
116 files68.0% of measured size
Frameworks/61.0 MB
221 files22.8% of measured size
PlugIns/20.1 MB
81 files7.5% of measured size
GoogleMaps.bundle/1.7 MB
139 files0.6% of measured size
Other folders2.7 MB
307 files1.0% of measured size

Folders inside the app bundle, plus archive level files. “App root” groups files directly inside the .app.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

File / pathCategorySizeShare
ZaloPayload/Zalo.app/Zalo
Zalo
App executable174.3 MB65.2%
Assets.carPayload/Zalo.app/Frameworks/ZDSAssets.framework/Assets.car
Frameworks/ZDSAssets.framework/Assets.car
Frameworks & libraries34.5 MB12.9%
ZFaceEffectPayload/Zalo.app/Frameworks/ZFaceEffect.framework/ZFaceEffect
Frameworks/ZFaceEffect.framework/ZFaceEffect
Frameworks & libraries9.9 MB3.7%
ZaloIntentsExtensionPayload/Zalo.app/PlugIns/ZaloIntentsExtension.appex/ZaloIntentsExtension
PlugIns/ZaloIntentsExtension.appex/ZaloIntentsExtension
Other files6.2 MB2.3%
ShareExtensionPayload/Zalo.app/PlugIns/ShareExtension.appex/ShareExtension
PlugIns/ShareExtension.appex/ShareExtension
Other files6.1 MB2.3%
NotificationServiceExtensionPayload/Zalo.app/PlugIns/NotificationServiceExtension.appex/NotificationServiceExtension
PlugIns/NotificationServiceExtension.appex/NotificationServiceExtension
Other files3.6 MB1.4%
ZADesignSystemPayload/Zalo.app/Frameworks/ZADesignSystem.framework/ZADesignSystem
Frameworks/ZADesignSystem.framework/ZADesignSystem
Frameworks & libraries3.4 MB1.3%
libzjxlPayload/Zalo.app/Frameworks/libzjxl.framework/libzjxl
Frameworks/libzjxl.framework/libzjxl
Frameworks & libraries3.2 MB1.2%
NotificationContentExtensionPayload/Zalo.app/PlugIns/NotificationContentExtension.appex/NotificationContentExtension
PlugIns/NotificationContentExtension.appex/NotificationContentExtension
Other files1.3 MB0.5%
ZaloTodayExtensionPayload/Zalo.app/PlugIns/ZaloTodayExtension.appex/ZaloTodayExtension
PlugIns/ZaloTodayExtension.appex/ZaloTodayExtension
Other files1.2 MB0.5%
ZDSTokensPayload/Zalo.app/Frameworks/ZDSTokens.framework/ZDSTokens
Frameworks/ZDSTokens.framework/ZDSTokens
Frameworks & libraries989.4 KB0.4%
emoticon@3x.pngPayload/Zalo.app/emoticon@3x.png
emoticon@3x.png
Images & resources838.0 KB0.3%
Localizable.generated.stringsPayload/Zalo.app/vi.lproj/Localizable.generated.strings
vi.lproj/Localizable.generated.strings
Configuration817.0 KB0.3%
Localizable.generated.stringsPayload/Zalo.app/en.lproj/Localizable.generated.strings
en.lproj/Localizable.generated.strings
Configuration805.9 KB0.3%
Assets.carPayload/Zalo.app/PlugIns/ShareExtension.appex/Assets.car
PlugIns/ShareExtension.appex/Assets.car
Images & resources730.2 KB0.3%
FirebaseCrashlyticsPayload/Zalo.app/Frameworks/FirebaseCrashlytics.framework/FirebaseCrashlytics
Frameworks/FirebaseCrashlytics.framework/FirebaseCrashlytics
Frameworks & libraries675.7 KB0.2%
Sync2ProtoLibPayload/Zalo.app/Frameworks/Sync2ProtoLib.framework/Sync2ProtoLib
Frameworks/Sync2ProtoLib.framework/Sync2ProtoLib
Frameworks & libraries664.6 KB0.2%
TextEdit_Pangolin.TTFPayload/Zalo.app/TextEdit_Pangolin.TTF
TextEdit_Pangolin.TTF
Images & resources578.8 KB0.2%
ZAMediaExporterPayload/Zalo.app/Frameworks/ZAMediaExporter.framework/ZAMediaExporter
Frameworks/ZAMediaExporter.framework/ZAMediaExporter
Frameworks & libraries558.9 KB0.2%
BackupProtoLibPayload/Zalo.app/Frameworks/BackupProtoLib.framework/BackupProtoLib
Frameworks/BackupProtoLib.framework/BackupProtoLib
Frameworks & libraries549.1 KB0.2%

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

37 binaries · 37 slices
arm64No encrypted slicesParsed in 10.984s · 2026-10-30

Select a Mach O file

Choose a binary and architecture. Detailed tables load on demand, not with the initial page.

Integer fields use hexadecimal, without locale separators or loss of 64 bit precision. JSON downloads preserve the original numeric data. Tables retain up to 10000 records each, with totals and truncation markers. Signing data is descriptive; trust and code page hashes are not verified. Not disassembly.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

31 embedded libraries

No engine identification recorded for this build. That does not mean the app has no game engine or runtime.

ZFaceEffect

9.9 MB

Framework

Show 19 more libraries

ZKit

211.5 KB

Other · 1.0

nanopb

93.3 KB

Other · 3.30910.0

Framework sizes include their recorded resources, not just the executable. Library presence does not prove active use. A “+” indicates some constituent sizes are missing.

Additional scanner detections 2

Crash Reporting

Other

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded
Tracking declared
No
Non exempt encryption
Not declared
Permission descriptions
NSLocationAlwaysUsageDescription
When you share live location, Zalo needs to access your location to update real-time information as you move.
NFCReaderUsageDescription
This allows you to perform electronic identification by scanning the chip on your Citizen ID card.
NSSiriUsageDescription
You can use Siri to send messages and make calls in Zalo.
NSCameraUsageDescription
This lets you take photos, capture videos, make video calls and also scan QR code to make friend in Zalo.
NSLocationUsageDescription
This lets you share location in chat and also enables other location-based features like Find near by friends, official accounts, places and more.
NSMicrophoneUsageDescription
This lets you make voice and video calls, create voice messages and record videos with sounds.
NSLocationWhenInUseUsageDescription
This lets you share location in chat and also enables other location-based features like Find near by friends, official accounts, places and more.
NSFaceIDUsageDescription
Enable Face ID for quick and secure authentication on Zalo.
NSLocationAlwaysAndWhenInUseUsageDescription
When you share live location, Zalo needs to access your location to update real-time information as you move.
NSContactsUsageDescription
Zalo needs to access your phonebook contacts and sync them to its encrypted server continuously. This will let you connect with your friends, and also help your friends can find you easily.
NSPhotoLibraryUsageDescription
This lets you send photos and videos from library and save those you capture.
Tracking domains 0
[]
Accessed API types 9
[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "1C8F.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "C617.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "C56D.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "85F4.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "DDA9.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
    "NSPrivacyAccessedAPITypeReasons": [
      "35F9.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "E174.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryActiveKeyboards",
    "NSPrivacyAccessedAPITypeReasons": [
      "54BD.1"
    ]
  }
]
Collected data types 3
[
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  }
]
Additional Info.plist declarations
App transport security
{
  "NSAllowsArbitraryLoads": true
}
Url schemes
[
  {
    "CFBundleTypeRole": "Editor",
    "CFBundleURLSchemes": [
      "com.googleusercontent.apps.181370460807-bt0g6i7u8525dml4rsnc45tpm0j02d41"
    ]
  },
  {
    "CFBundleTypeRole": "Editor",
    "CFBundleURLName": "zaloapp.com",
    "CFBundleURLSchemes": [
      "zalo",
      "zalosdk",
      "zalosdk7",
      "zaloshareext",
      "zalosdkgame"
    ]
  },
  {
    "CFBundleURLName": "facebook.com",
    "CFBundleURLSchemes": [
      "fb198235073635027"
    ]
  }
]
Required capabilities
[
  "arm64"
]

Static observations

2 recorded
Firebase

Firebase client configuration present

Project: zalo-io. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested.

ATS

NSAllowsArbitraryLoads: true

The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.

Analysis record
Method
Stored static package extraction and inventory; not a live security test.
Coverage
Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times
2026-10-30 09:37:52, 2026-10-30T09:37:52.804612+00:00
Known version identifiers
371 (32 with metadata)

Browse version history on the app page →