Flambé®: Merge and Cook IPA Analysis

Explore package contents, native binaries, and declarations for this build.

Inside the IPA

Flambé®: Merge and Cook

Microfun Limitedcom.mf.cola

← App page
Latest analyzed IPAv1.53.1
Build 111Record 8922636812026-10-21
Uncompressed files243.5 MBSum of recorded file sizes
Recorded IPA size162.2 MBSelected build · archive size
Files inventoried3567 file categories
Embedded libraries8Frameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed
Game data & bundles152.7 MB62.7% Frameworks & libraries88.2 MB36.2% Images & resources2.2 MB0.9% Signing & receipts262.3 KB0.1% App executable86.1 KB0.0% Configuration17.6 KB0.0% Other files1.2 KB0.0%

All 356 file sizes included. Select a category to explore its files. Categories are inferred from paths; archive and installed sizes differ.

Bundle structure

Space by folder

Top level
Data/152.7 MB
110 files62.7% of measured size
Frameworks/88.3 MB
218 files36.2% of measured size
App root2.3 MB
12 files1.0% of measured size
_CodeSignature/164.8 KB
1 files0.1% of measured size
Other folders12.0 KB
15 files0.0% of measured size

Folders inside the app bundle, plus archive level files. “App root” groups files directly inside the .app.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

File / pathCategorySizeShare
UnityFrameworkPayload/Flambe.app/Frameworks/UnityFramework.framework/UnityFramework
Frameworks/UnityFramework.framework/UnityFramework		Frameworks & libraries80.0 MB32.9%
effects_assets_all_1034af48442b2ec634faa6818f208199.bundlePayload/Flambe.app/Data/Raw/aa/ios/effects_assets_all_1034af48442b2ec634faa6818f208199.bundle
Data/Raw/aa/ios/effects_assets_all_1034af48442b2ec634faa6818f208199.bundle		Game data & bundles14.1 MB5.8%
bbq_3f87028aee8745d7f812b03651bb9cfa.bundlePayload/Flambe.app/Data/Raw/aa/ios/chapter-local_assets_assets/chapter/bbq_3f87028aee8745d7f812b03651bb9cfa.bundle
Data/Raw/aa/ios/chapter-local_assets_assets/chapter/bbq_3f87028aee8745d7f812b03651bb9cfa.bundle		Game data & bundles11.4 MB4.7%
audio_assets_all_8692c7b821eb875f6ab06f0d53d1f5e9.bundlePayload/Flambe.app/Data/Raw/aa/ios/audio_assets_all_8692c7b821eb875f6ab06f0d53d1f5e9.bundle
Data/Raw/aa/ios/audio_assets_all_8692c7b821eb875f6ab06f0d53d1f5e9.bundle		Game data & bundles11.2 MB4.6%
font_assets_all_f561492a92fbac9e20e9e98e26fe6723.bundlePayload/Flambe.app/Data/Raw/aa/ios/font_assets_all_f561492a92fbac9e20e9e98e26fe6723.bundle
Data/Raw/aa/ios/font_assets_all_f561492a92fbac9e20e9e98e26fe6723.bundle		Game data & bundles10.5 MB4.3%
global-metadata.datPayload/Flambe.app/Data/Managed/Metadata/global-metadata.dat
Data/Managed/Metadata/global-metadata.dat		Game data & bundles9.5 MB3.9%
lua.bytes_2c8f786224a763596b20c1c16151469b.bundlePayload/Flambe.app/Data/Raw/aa/ios/lua_assets_assets/scripts/lua/lua.bytes_2c8f786224a763596b20c1c16151469b.bundle
Data/Raw/aa/ios/lua_assets_assets/scripts/lua/lua.bytes_2c8f786224a763596b20c1c16151469b.bundle		Game data & bundles8.9 MB3.7%
market_fcb6473decba3213aa14300b0ab74276.bundlePayload/Flambe.app/Data/Raw/aa/ios/chapter-local_assets_assets/chapter/market_fcb6473decba3213aa14300b0ab74276.bundle
Data/Raw/aa/ios/chapter-local_assets_assets/chapter/market_fcb6473decba3213aa14300b0ab74276.bundle		Game data & bundles7.9 MB3.2%
inpack_a26d82358b475a5743b6da203765c951.bundlePayload/Flambe.app/Data/Raw/aa/ios/board-local_assets_assets/board/itemmain/inpack_a26d82358b475a5743b6da203765c951.bundle
Data/Raw/aa/ios/board-local_assets_assets/board/itemmain/inpack_a26d82358b475a5743b6da203765c951.bundle		Game data & bundles6.5 MB2.7%
luaconfig.bytes_bf2efabdd2e58702d17aa305eaee77ef.bundlePayload/Flambe.app/Data/Raw/aa/ios/lua_assets_assets/scripts/lua/luaconfig.bytes_bf2efabdd2e58702d17aa305eaee77ef.bundle
Data/Raw/aa/ios/lua_assets_assets/scripts/lua/luaconfig.bytes_bf2efabdd2e58702d17aa305eaee77ef.bundle		Game data & bundles6.3 MB2.6%
window_98da6884b454959733d1a3b2d88cfc19.bundlePayload/Flambe.app/Data/Raw/aa/ios/ui-local_assets_assets/ui/window_98da6884b454959733d1a3b2d88cfc19.bundle
Data/Raw/aa/ios/ui-local_assets_assets/ui/window_98da6884b454959733d1a3b2d88cfc19.bundle		Game data & bundles5.6 MB2.3%
common_22d0edc083910ea83943a5f13475ca26.bundlePayload/Flambe.app/Data/Raw/aa/ios/chapter-local_assets_assets/chapter/common_22d0edc083910ea83943a5f13475ca26.bundle
Data/Raw/aa/ios/chapter-local_assets_assets/chapter/common_22d0edc083910ea83943a5f13475ca26.bundle		Game data & bundles4.6 MB1.9%
camping_9c9011d28466c56acbfe3823dc109b83.bundlePayload/Flambe.app/Data/Raw/aa/ios/bundlelocal_assets_assets/bundlelocal/camping_9c9011d28466c56acbfe3823dc109b83.bundle
Data/Raw/aa/ios/bundlelocal_assets_assets/bundlelocal/camping_9c9011d28466c56acbfe3823dc109b83.bundle		Game data & bundles4.0 MB1.6%
catalog.jsonPayload/Flambe.app/Data/Raw/aa/catalog.json
Data/Raw/aa/catalog.json		Game data & bundles3.5 MB1.4%
FBSDKCoreKitPayload/Flambe.app/Frameworks/FBSDKCoreKit.framework/FBSDKCoreKit
Frameworks/FBSDKCoreKit.framework/FBSDKCoreKit		Frameworks & libraries3.3 MB1.4%
sharedassets0.assetsPayload/Flambe.app/Data/sharedassets0.assets
Data/sharedassets0.assets		Game data & bundles3.0 MB1.2%
data_assets_all_dcabe9bb6279706c8f8b0ba4f58703d4.bundlePayload/Flambe.app/Data/Raw/aa/ios/data_assets_all_dcabe9bb6279706c8f8b0ba4f58703d4.bundle
Data/Raw/aa/ios/data_assets_all_dcabe9bb6279706c8f8b0ba4f58703d4.bundle		Game data & bundles2.7 MB1.1%
energy2_376aeef73afb229e616e1460190d42d4.bundlePayload/Flambe.app/Data/Raw/aa/ios/bundlelocal_assets_assets/bundlelocal/energy2_376aeef73afb229e616e1460190d42d4.bundle
Data/Raw/aa/ios/bundlelocal_assets_assets/bundlelocal/energy2_376aeef73afb229e616e1460190d42d4.bundle		Game data & bundles2.7 MB1.1%
Assets.carPayload/Flambe.app/Assets.car
Assets.car		Images & resources2.1 MB0.9%
sharedassets0.assets.resSPayload/Flambe.app/Data/sharedassets0.assets.resS
Data/sharedassets0.assets.resS		Game data & bundles2.1 MB0.9%

Showing the 20 largest files of 356. Enable JavaScript to search and browse.

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

9 binaries · 9 slices
arm64No encrypted slicesParsed in 2.893s · 2026-11-04

Select a Mach O file

Choose a binary and architecture. Detailed tables load on demand, not with the initial page.

Integer fields use hexadecimal, without locale separators or loss of 64 bit precision. JSON downloads preserve the original numeric data. Tables retain up to 10000 records each, with totals and truncation markers. Signing data is descriptive; trust and code page hashes are not verified. Not disassembly.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

8 embedded libraries
UnityRuntime markers in package paths
Frameworks/UnityFramework.framework/UnityFrameworkData/Managed/Metadata/global-metadata.datData/globalgamemanagers

Path based identification, not a verified engine version.

libswift_Concurrency.dylib

407.3 KB

Dynamic library

Framework sizes include their recorded resources, not just the executable. Library presence does not prove active use. A “+” indicates some constituent sizes are missing.

Additional scanner detections 1

Auth

Facebook Login 1.0

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded
Tracking declared
Yes
Non exempt encryption
Not declared
Permission descriptions
NSPhotoLibraryUsageDescription
[Optional] Please upload photos to help us identify the issue. (Photo access is optional and won't affect gameplay.)If you cannot upload photos, denied access, or chose the wrong category, please go back or use the Chatbot.
NSCameraUsageDescription
We need access to your camera permission to take pictures of the problem and give feedback to customer service.
NSUserTrackingUsageDescription
Your data will help us to provide a more personalized experience and offers.
NSMicrophoneUsageDescription
We need access to your microphone permission to upload video recordings on the form page and give feedback to customer service.
NSLocationWhenInUseUsageDescription
Gossip Harbor needs Location access for find game friends!
Tracking domains 17
[
  "ep1.facebook.com",
  "att.attr.whappsflyer.com",
  "att.attr.appsflyer-cn.com",
  "att.attr.hevents.appsflyer-cn.com",
  "att.launches.whappsflyer.com",
  "att.launches.appsflyer-cn.com",
  "att.launches.hevents.appsflyer-cn.com",
  "att.conversions.hevents.appsflyer-cn.com",
  "att.conversions.appsflyer-cn.com",
  "att.conversions.whappsflyer.com",
  "att.dlsdk.hevents.appsflyer-cn.com",
  "att.dlsdk.appsflyer-cn.com",
  "att.dlsdk.whappsflyer.com",
  "att.dlsdk.appsflyersdk.com",
  "att.conversions.appsflyersdk.com",
  "att.launches.appsflyersdk.com",
  "att.attr.appsflyersdk.com"
]
Accessed API types 7
[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "C617.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "1C8F.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "C56D.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
    "NSPrivacyAccessedAPITypeReasons": [
      "35F9.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "E174.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "0A2A.1",
      "C617.1"
    ]
  }
]
Collected data types 19
[
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDataTypes",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePurchaseHistory",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePerformanceData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeDeveloperAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePurchaseHistory",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeDeveloperAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDataTypes",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCustomerSupport",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  }
]
Additional Info.plist declarations
App transport security
{
  "NSAllowsArbitraryLoads": true
}
Url schemes
[
  {
    "CFBundleURLName": "mergegames-sdk",
    "CFBundleURLSchemes": [
      "com.mf.cola"
    ]
  },
  {
    "CFBundleURLName": "microfun",
    "CFBundleURLSchemes": [
      "flambe"
    ]
  },
  {
    "CFBundleURLName": "facebook-unity-sdk",
    "CFBundleURLSchemes": [
      "fb1981978125555803"
    ]
  }
]
Required capabilities
[
  "arm64",
  "metal"
]

Static observations

2 recorded
Firebase

Firebase client configuration present

Project: cola4merge. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested.

ATS

NSAllowsArbitraryLoads: true

The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.

Analysis record
Method
Stored static package extraction and inventory; not a live security test.
Coverage
Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times
2026-11-04 01:50:08, 2026-11-04T01:50:08.626219+00:00
Known version identifiers
62 (25 with metadata)

Browse version history on the app page →