The thing is these are system apps so not easy to analyze unless you're root. What you can do is use observe your device traffic and see if any of these domains

The thing is these are system apps so not easy to analyze unless you're root. What you can do is use observe your device traffic and see if any of these domains are pinged: bigdata.adups.com (primary) bigdata.adsunflower.com bigdata.adfuture.cn bigdata.advmob.cn Then check the content of the POST request (usually to url/mobileupload.do )