Androlyzer

Know more about your apps

App description

McDonald’s Deutschland

de.mcdonalds.mcdonaldsinfoapp
Inhalte der offiziellen McDonald’s Android App: Deine Lieblingsprodukte, McCafé Sammelpass**, alle Restaurants und deutschlandweiten Gutscheinaktionen****.Jetzt schnell unsere App herunterladen:• Aktuelle Aktionsprodukte* und alle unsere Klassiker • Stempel sammeln mit dem McCafé Sammelpass**• Produktinformationen*** mit Nährwerten und Allergiefilter• Restaurantsuche mit Öffnungszeiten und Offline-Funktion• Deutschlandweite Gutscheine**** zum direkten Einlösen im Aktionszeitraum, einfach an der Kasse vorzeigen* Aktionsprodukte gibt es in allen teilnehmenden Restaurants in Deutschland und in Luxemburg.** Nur in teilnehmenden Restaurants. Beim Kauf eines Heißgetränks in den Größen regular oder grande erhältst du jeweils einen digitalen Stempel. Hast du 6 digitale Stempel, erhältst du einen Gratis-Code, mit dem du dir bei deinem nächsten Besuch ein gratis Heißgetränk nach Wahl in der Größe regular abholen kannst. Nicht mit anderen Rabattaktionen kombinierbar. Registrierung als McVIP vorausgesetzt. *** Preisinformationen bekommst du direkt im Restaurant.**** Gutscheine findest du in der App nur bei deutschlandweiten Aktionen und nur im Aktionszeitraum. Das Einlösen ist nur in teilnehmenden Restaurants möglich. Die Liste der teilnehmenden Restaurants findest du hier in der App oder im Internet unter McDonalds.de. Contents of the official McDonald's Android app: your favorite products, McCafe collective passport **, all restaurants and Germany-wide voucher Actions ****.Download now fast our app:• Current Promotional products * and all our classics• stamp collecting with the McCafe collective passport **• Product information *** with nutritional and allergen filter• Restaurants with opening times and offline feature• Germany-wide coupons **** for direct redeeming the promotional period, simply show at checkout* Special products are available in all participating restaurants in Germany and Luxembourg.** Only at participating restaurants. When buying a hot beverage in sizes regular or grande you get each a digital stamp. Did you 6 digital stamp, you get a free code with which you can pick up a free hot drink of choice in size at your next visit you regular. Can not be combined with other discount offers. Registration required as McVIP.*** Price information you get at the restaurant.**** Coupons you find in the app only Germany-wide actions and only during the promotional period. Redeeming is possible only at participating restaurants. The list of participating restaurants can be found here in the app or online at McDonalds.de.

Analysis results

Privacy leaks

  • Location to HTTP Header
  • Location to HTTP upload
  • Location to Network
  • Location to Socket
  • User Input to HTTP Header
  • User Input to HTTP upload
  • User Input to Network
  • User Input to Socket

Confidential sources

  • Bluetooth MAC address
  • Calendar
  • Location
  • Screenshot
  • User Input

Suspicious functions

  • Obfuscation

Permissions

  • android.permission.ACCESS_COARSE_LOCATION
  • android.permission.ACCESS_FINE_LOCATION
  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.BLUETOOTH
  • android.permission.BLUETOOTH_ADMIN
  • android.permission.GET_ACCOUNTS
  • android.permission.INTERNET
  • android.permission.RECEIVE_BOOT_COMPLETED
  • android.permission.WAKE_LOCK
  • com.google.android.c2dm.intent.RECEIVE
  • com.google.android.c2dm.permission.RECEIVE
  • com.google.android.gms.permission.ACTIVITY_RECOGNITION
  • de.mcdonalds.mcdonaldsinfoapp.permission.C2D_MESSAGE

Features used

  • android.hardware.location.gps
  • android.hardware.location.network

URLs

Other URLs

  • file:///android_asset/
  • file:///android_asset/error.html
  • http://data.altbeacon.org
  • http://localhost
  • http://mcd-campaigns-prod.s3-eu-west-1.amazonaws.com
  • http://play.google.com
  • http://plus.google.com
  • http://schemas.android.com
  • http://www.example.com
  • http://www.google.com
  • http://www.slf4j.org
  • https://accounts.google.com
  • https://api.bitplaces.net
  • https://app-measurement.com
  • https://auth.firebase.com
  • https://csi.gstatic.com
  • https://e.crashlytics.com
  • https://goo.gl
  • https://googleads.g.doubleclick.net
  • https://login.live.com
  • https://login.yahoo.com
  • https://mcd-api.anexia-it.com
  • https://mcd-campaigns-prod.s3-eu-west-1.amazonaws.com
  • https://mcd.customer-intelligence-services.de
  • https://mcvip.mcdonalds.de
  • https://monitor.bitplaces.net
  • https://monopoly.mcdonalds.de
  • https://pagead2.googlesyndication.com
  • https://play.google.com
  • https://settings.crashlytics.com
  • https://twitter.com
  • https://www.facebook.com
  • https://www.google.com
  • https://www.googleapis.com
  • https://www.linkedin.com
  • https://www.mcdonalds.de
  • https://www.paypal.com
  • https://www.youtube.com
  • https://xts.ccmp.eu

Version info

APK hash: 97b7f3d1202bcf47ad2ffa34987e6d41a4ec05b4
Other versions:
249/9b195a5e861350c496f9cf22ec7b2916259dd6b0
246/b3d08bc8074ee0f8c1133e181abf384986e1f4b3
242/38207879035e61662dfa15918ae42acf77b5209d
237/eeac0e15d31421209c43659a358008a5f21b5c73
220/697ebba49daf389e488370bf14e7a3b226c788d4
219/f891b07a158c71bee9aaefd3cee632487ce837b5
212/6afd28ef7ca49240a2fa86f22c368d0f5a6c29fc
209/bea584507a3f958b319f648a9bbe4cb618de99f5
207/c55009fb60efd95e57e2c92cd03554d041af4137
204/9cdaed636f5d7907ac810adf81187b65803d32e7

Source structure

Used libraries

    • Ads

    Google Mobile Ads

    SDK for Google's mobile ad service
    Show details ⇓
    • Utility

    Crashlytics

    Crash reporting solution.
    Show details ⇓
    • Open source
    • Utility

    Android support library

    Simplify your development by offering more APIs that you can bundle with your application so you can worry less about platform versions
    Show details ⇓
    • Utility

    zxing

    Multi-format 1D/2D barcode image processing library.
    Show details ⇓
    • Private service binding

    Google Play services

    Google Play services binding library.
    Show details ⇓
    • Utility

    google-gson

    Library to serialize java objects to their JSON representation and back.
    Show details ⇓

APIs used

  • javax.microedition.khronos.egl
  • java.nio
  • java.sql
  • android.content.pm
  • org.apache.http.impl.client
  • android.os
  • android.location
  • android.widget
  • android.text.util
  • android.view.accessibility
  • java.security.interfaces
  • android.app
  • android.opengl
  • android.print
  • java.math
  • org.json
  • java.security.spec
  • android.accounts
  • java.util.concurrent
  • android.animation
  • android.text.format
  • android.content
  • org.apache.http.conn.ssl
  • android.appwidget
  • android.hardware.display
  • java.util.logging
  • android.bluetooth.le
  • android.webkit
  • javax.net.ssl
  • android.security
  • android.net.http
  • android.net
  • android.service.media
  • android.content.res
  • android.view.animation
  • javax.crypto.spec
  • android.transition
  • org.apache.http.impl.cookie
  • java.util.zip
  • java.util.regex
  • java.util
  • android.text.method
  • android.media.session
  • android.telephony
  • android.view.inputmethod
  • javax.crypto
  • android.provider
  • android.database.sqlite
  • android.view
  • java.net
  • android.hardware
  • android.print.pdf
  • java.util.concurrent.locks
  • org.apache.http.client.methods
  • android.graphics
  • javax.security.auth.x500
  • org.apache.http.entity
  • android.graphics.drawable.shapes
  • java.util.concurrent.atomic
  • android.accessibilityservice
  • android.graphics.drawable
  • javax.net
  • org.apache.http.client.entity
  • org.apache.http.message
  • android.media
  • org.apache.http
  • java.lang.reflect
  • android.graphics.pdf
  • android.database
  • java.lang.ref
  • java.nio.channels
  • java.io
  • android.media.browse
  • android.bluetooth
  • android.util
  • java.security
  • java.text
  • dalvik.system
  • java.lang
  • org.xmlpull.v1
  • java.security.cert
  • org.apache.http.params
  • android.text
  • org.apache.http.client
  • java.nio.charset
  • android.telephony.gsm
  • android.text.style
  • android.renderscript

Other packages

  • android.databinding
  • android.databinding.adapters
  • android.databinding.layouts
  • com.adobe.mobile
  • com.android.databinding.library
  • com.android.databinding.library.baseAdapters
  • com.bitplaces.sdk.android
  • com.bitplaces.sdk.android.broadcast
  • com.bitplaces.sdk.android.datatypes
  • com.bitplaces.sdk.android.diagnostics
  • com.bitplaces.sdk.android.rest
  • com.bumptech.glide
  • com.bumptech.glide.disklrucache
  • com.bumptech.glide.gifdecoder
  • com.bumptech.glide.gifencoder
  • com.bumptech.glide.integration.okhttp
  • com.bumptech.glide.integration.okhttp3
  • com.bumptech.glide.load
  • com.bumptech.glide.load.data
  • com.bumptech.glide.load.engine
  • com.bumptech.glide.load.engine.bitmap_recycle
  • com.bumptech.glide.load.engine.cache
  • com.bumptech.glide.load.engine.executor
  • com.bumptech.glide.load.engine.prefill
  • com.bumptech.glide.load.model
  • com.bumptech.glide.load.model.file_descriptor
  • com.bumptech.glide.load.model.stream
  • com.bumptech.glide.load.resource
  • com.bumptech.glide.load.resource.bitmap
  • com.bumptech.glide.load.resource.bytes
  • com.bumptech.glide.load.resource.drawable
  • com.bumptech.glide.load.resource.file
  • com.bumptech.glide.load.resource.gif
  • com.bumptech.glide.load.resource.gifbitmap
  • com.bumptech.glide.load.resource.transcode
  • com.bumptech.glide.manager
  • com.bumptech.glide.module
  • com.bumptech.glide.provider
  • com.bumptech.glide.request
  • com.bumptech.glide.request.animation
  • com.bumptech.glide.request.target
  • com.bumptech.glide.signature
  • com.bumptech.glide.util
  • com.firebase.client
  • com.firebase.client.android
  • com.firebase.client.authentication
  • com.firebase.client.authentication.util
  • com.firebase.client.collection
  • com.firebase.client.core
  • com.firebase.client.core.operation
  • com.firebase.client.core.persistence
  • com.firebase.client.core.utilities
  • com.firebase.client.core.view
  • com.firebase.client.core.view.filter
  • com.firebase.client.realtime
  • com.firebase.client.realtime.util
  • com.firebase.client.snapshot
  • com.firebase.client.utilities
  • com.firebase.client.utilities.encoding
  • com.firebase.client.utilities.tuple
  • com.firebase.tubesock
  • com.getkeepsafe.relinker
  • com.getkeepsafe.relinker.elf
  • com.google.android.youtube.player
  • com.google.android.youtube.player.internal
  • com.google.firebase
  • com.google.firebase.analytics
  • com.google.firebase.auth
  • com.google.firebase.firebase_core
  • com.google.firebase.iid
  • com.google.firebase.messaging
  • com.google.firebase.provider
  • com.google.maps.android
  • com.google.maps.android.clustering
  • com.google.maps.android.clustering.algo
  • com.google.maps.android.clustering.view
  • com.google.maps.android.geojson
  • com.google.maps.android.geometry
  • com.google.maps.android.heatmaps
  • com.google.maps.android.kml
  • com.google.maps.android.projection
  • com.google.maps.android.quadtree
  • com.google.maps.android.ui
  • com.viewpagerindicator
  • de.mcdonalds.app
  • de.mcdonalds.app.api
  • de.mcdonalds.app.api.content
  • de.mcdonalds.app.api.mcvip
  • de.mcdonalds.app.api.queue
  • de.mcdonalds.app.api.serializer
  • de.mcdonalds.app.databinding
  • de.mcdonalds.app.helper
  • de.mcdonalds.app.helper.font
  • de.mcdonalds.app.model.api
  • de.mcdonalds.app.model.content
  • de.mcdonalds.app.model.ems
  • de.mcdonalds.app.model.ems.Response
  • de.mcdonalds.app.model.mcvip
  • de.mcdonalds.app.model.mcvip.request
  • de.mcdonalds.app.monopoly.api
  • de.mcdonalds.app.monopoly.geofencing
  • de.mcdonalds.app.monopoly.model
  • de.mcdonalds.app.monopoly.model.api
  • de.mcdonalds.app.monopoly.model.geocodes
  • de.mcdonalds.app.monopoly.model.geocodes.enums
  • de.mcdonalds.app.monopoly.model.help
  • de.mcdonalds.app.monopoly.model.mail
  • de.mcdonalds.app.monopoly.ui.base
  • de.mcdonalds.app.monopoly.ui.code_submission
  • de.mcdonalds.app.monopoly.ui.help
  • de.mcdonalds.app.monopoly.ui.main
  • de.mcdonalds.app.monopoly.ui.map
  • de.mcdonalds.app.monopoly.ui.participation
  • de.mcdonalds.app.monopoly.util
  • de.mcdonalds.app.service
  • de.mcdonalds.app.view.home
  • de.mcdonalds.app.view.home.coupon
  • de.mcdonalds.app.view.home.legal
  • de.mcdonalds.app.view.main
  • de.mcdonalds.app.view.mcvip
  • de.mcdonalds.app.view.mcvip.mccafepass
  • de.mcdonalds.app.view.product
  • de.mcdonalds.app.view.restaurant
  • io.fabric.sdk.android
  • io.fabric.sdk.android.services.cache
  • io.fabric.sdk.android.services.common
  • io.fabric.sdk.android.services.concurrency
  • io.fabric.sdk.android.services.concurrency.internal
  • io.fabric.sdk.android.services.events
  • io.fabric.sdk.android.services.network
  • io.fabric.sdk.android.services.persistence
  • io.fabric.sdk.android.services.settings
  • io.realm
  • io.realm.annotations
  • io.realm.exceptions
  • io.realm.internal
  • io.realm.internal.android
  • io.realm.internal.async
  • io.realm.internal.log
  • io.realm.internal.modules
  • io.realm.rx
  • net.glxn.qrgen.android
  • net.glxn.qrgen.core
  • net.glxn.qrgen.core.exception
  • net.glxn.qrgen.core.image
  • net.glxn.qrgen.core.scheme
  • okhttp3
  • okhttp3.internal
  • okhttp3.internal.framed
  • okhttp3.internal.http
  • okhttp3.internal.io
  • okhttp3.internal.tls
  • okio
  • org.altbeacon.beacon
  • org.altbeacon.beacon.client
  • org.altbeacon.beacon.distance
  • org.altbeacon.beacon.logging
  • org.altbeacon.beacon.powersave
  • org.altbeacon.beacon.service
  • org.altbeacon.beacon.service.scanner
  • org.altbeacon.beacon.simulator
  • org.altbeacon.beacon.startup
  • org.altbeacon.beacon.utils
  • org.altbeacon.bluetooth
  • org.slf4j
  • org.slf4j.helpers
  • org.slf4j.spi
  • retrofit2
  • retrofit2.converter.gson
  • retrofit2.http
  • uk.co.chrisjenx.calligraphy