APK的 Dex MD5 反查样本查询

接口说明

对 APK 样本提取出主Dex 文件，并计算其 md5 并入库存储，接口提供基于此 Dex md5 的反查 APK 文件的功能。

请求地址

https://api.f.360.cn/files/apk/v1/dex_md5

请求方法

POST

请求参数

参数名	类型	位置	是否必填	示例值	说明
dex_md5	string	body	是	077bb47f85e1b1c883ad5e19ecc30606	APK 主 Dex 文件的Md5

响应参数

名称	类型	示例值	描述
cert_md5	string	757c913ceffabd43b1fac7ad7b3df2f3	APK 文件证书 MD5
cert_name	string	CN=DdaeTABjArTKcZpQ, OU=YkJAfgAhioTVGjjxXDsA, O=lkYkGUvWpWAKFQpjZ, L=ibVchMdOKO, ST=NdZwQClDxUEvbuD, C=ulwNvBYDnlmTfeDT	APK 文件证书名
md5	string	7ffd14243dff8e77ecd03b54d01035a2	APK 文件 MD5
mfsha1	string		APK 文件mfsha1
name	string	ψलग	APK 应用名
uid	string	singansfg.qahlrpusci.sdancsuhsfj	APK 包名
version	string	1.0.0	APK 版本
version_code	number	172	APK 版本号

请求示例

支持cUrl、Python、Java、PHP、Go语言的请求，示例如下

#!/usr/bin/env bash
set -euo pipefail

APPID=""  # apikey
SECRET=""  # salt
URL="https://api.f.360.cn/files/apk/v1/dex_md5"
BODY='{"dex_md5":"077bb47f85e1b1c883ad5e19ecc30606"}'

NONCE=$(printf '%08d' $((RANDOM % 100000000)))
TIMESTAMP=$(date +%s)
BODY_MD5=$(printf '%s' "$BODY" | openssl dgst -md5 -hex | awk '{print $NF}')
SIGNATURE=$(printf '%s' "${BODY_MD5}${APPID}${NONCE}${TIMESTAMP}${SECRET}" | openssl dgst -md5 -hex | awk '{print $NF}')
SIGNATURE=${SIGNATURE:16}

curl --location --request POST "$URL" \
  --header "Content-Type: application/json" \
  --header "X-360-Key: ${APPID}" \
  --header "X-360-Nonce: ${NONCE}" \
  --header "X-360-Timestamp: ${TIMESTAMP}" \
  --header "X-360-Signature: ${SIGNATURE}" \
  --data "${BODY}"

# python3.6.8

import hashlib
import json
import random
import time

import requests

APPID = ""  # apikey
SECRET = ""  # salt


def make_headers(appid, secret, body):
    headers = {}
    headers["X-360-Key"] = appid
    headers["X-360-Nonce"] = str(random.randint(0, 99999999)).zfill(8)
    headers["X-360-Timestamp"] = str(int(time.time()))

    s = (
        hashlib.md5(body.encode("utf8")).hexdigest()
        + headers["X-360-Key"]
        + headers["X-360-Nonce"]
        + headers["X-360-Timestamp"]
        + secret
    )
    md5 = hashlib.md5(s.encode("utf8")).hexdigest()
    headers["X-360-Signature"] = md5[16:]
    headers["Content-Type"] = "application/json"
    return headers


def do_post(url, body):
    res = requests.post(
        url,
        data=json.dumps(params),
        headers=make_headers(APPID, SECRET, json.dumps(body)),
    )
    print(res.text)


if __name__ == "__main__":
    # 请求地址
    url = "https://api.f.360.cn/files/apk/v1/dex_md5"
    # 查询参数
    params = {"dex_md5": "077bb47f85e1b1c883ad5e19ecc30606"}
    do_post(url, params)

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import java.util.concurrent.ThreadLocalRandom;

public class Demo {
    static String md5(String input) throws Exception {
        byte[] digest = MessageDigest.getInstance("MD5")
                .digest(input.getBytes(StandardCharsets.UTF_8));
        StringBuilder sb = new StringBuilder();
        for (byte b : digest) {
            sb.append(String.format("%02x", b & 0xff));
        }
        return sb.toString();
    }

    public static void main(String[] args) throws Exception {
        String appid = ""; // apikey
        String secret = ""; // salt
        String url = "https://api.f.360.cn/files/apk/v1/dex_md5";
        String body = "{\"dex_md5\":\"077bb47f85e1b1c883ad5e19ecc30606\"}";

        String nonce = String.format("%08d", ThreadLocalRandom.current().nextInt(100000000));
        String timestamp = String.valueOf(System.currentTimeMillis() / 1000);
        String signature = md5(md5(body) + appid + nonce + timestamp + secret).substring(16);

        HttpRequest request = HttpRequest.newBuilder()
                .uri(URI.create(url))
                .header("Content-Type", "application/json")
                .header("X-360-Key", appid)
                .header("X-360-Nonce", nonce)
                .header("X-360-Timestamp", timestamp)
                .header("X-360-Signature", signature)
                .POST(HttpRequest.BodyPublishers.ofString(body, StandardCharsets.UTF_8))
                .build();

        HttpClient client = HttpClient.newHttpClient();
        HttpResponse<String> response = client.send(
                request, HttpResponse.BodyHandlers.ofString(StandardCharsets.UTF_8));
        System.out.println(response.body());
    }
}

<?php

// apikey
$appid = "";
// salt
$secret = "";
$url = 'https://api.f.360.cn/files/apk/v1/dex_md5';
$body = json_encode(['dex_md5' => '077bb47f85e1b1c883ad5e19ecc30606'], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);

$nonce = str_pad((string) random_int(0, 99999999), 8, "0", STR_PAD_LEFT);
$timestamp = (string) time();
$signature = substr(md5(md5($body) . $appid . $nonce . $timestamp . $secret), 16);

$ch = curl_init($url);
$options = [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Content-Type: application/json",
        "X-360-Key: {$appid}",
        "X-360-Nonce: {$nonce}",
        "X-360-Timestamp: {$timestamp}",
        "X-360-Signature: {$signature}",
    ],
];
$options[CURLOPT_POST] = true;
$options[CURLOPT_POSTFIELDS] = $body;
curl_setopt_array($ch, $options);

$response = curl_exec($ch);
if ($response === false) {
    echo curl_error($ch), PHP_EOL;
} else {
    echo $response, PHP_EOL;
}
curl_close($ch);

package main

import (
	"bytes"
	"crypto/md5"
	"encoding/hex"
	"fmt"
	"io"
	"math/rand"
	"net/http"
	"time"
)

func md5Hex(s string) string {
	sum := md5.Sum([]byte(s))
	return hex.EncodeToString(sum[:])
}

func main() {
	appid := ""  // apikey
	secret := "" // salt
	url := "https://api.f.360.cn/files/apk/v1/dex_md5"
	body := []byte(`{"dex_md5":"077bb47f85e1b1c883ad5e19ecc30606"}`)

	nonce := fmt.Sprintf("%08d", rand.Intn(100000000))
	timestamp := fmt.Sprintf("%d", time.Now().Unix())
	signature := md5Hex(md5Hex(string(body)) + appid + nonce + timestamp + secret)[16:]

	req, err := http.NewRequest(http.MethodPost, url, bytes.NewReader(body))
	if err != nil {
		panic(err)
	}
	req.Header.Set("Content-Type", "application/json")
	req.Header.Set("X-360-Key", appid)
	req.Header.Set("X-360-Nonce", nonce)
	req.Header.Set("X-360-Timestamp", timestamp)
	req.Header.Set("X-360-Signature", signature)

	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()

	respBody, err := io.ReadAll(resp.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(respBody))
}

响应示例

业务正常响应

{
    "code": "0",
    "reason": "",
    "message": "",
    "data": {
        "info": [
            {
                "cert_md5": "757c913ceffabd43b1fac7ad7b3df2f3",
                "cert_name": "CN=DdaeTABjArTKcZpQ, OU=YkJAfgAhioTVGjjxXDsA, O=lkYkGUvWpWAKFQpjZ, L=ibVchMdOKO, ST=NdZwQClDxUEvbuD, C=ulwNvBYDnlmTfeDT",
                "createtime": "2025-12-05 05:55:55",
                "md5": "7ffd14243dff8e77ecd03b54d01035a2",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-05 05:55:55",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "16593e667260798a063090e94b3fa1fc",
                "cert_name": "CN=wjLZLODUkNeAty, OU=XtaFxByDtgSteVnk, O=hntndjoDmUlDw, L=MtcAzDHufbckqtO, ST=geUARWuhPxxzpfu, C=txgrTcjXaOvYs",
                "createtime": "2025-12-05 02:50:53",
                "md5": "e4b4d5c6f60cedc14f0f6ad7417a4159",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-05 17:38:26",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "237afc7b1cbf358e71299907814b6343",
                "cert_name": "CN=lqRiYtdFJPS, OU=zbhAElsrOqo, O=nzeVSOLgcC, L=vDNXxaygOC, ST=PEOuQlHIDq, C=LeZvAJvvSwBI",
                "createtime": "2025-12-04 22:44:19",
                "md5": "f9a6d814d76a887bfcab66e9bde6bd26",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-04 22:44:19",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "bba149659db8a7994f3004429aa29a03",
                "cert_name": "CN=sIWzErjEWBfBz, OU=ApbuFocYvLPmpAaP, O=gXBcGAYmQNQpHwgfB, L=xauWKOVVhQi, ST=XgyFgCjHqv, C=ROKFKUsVXjUxUbGC",
                "createtime": "2025-12-03 10:14:12",
                "md5": "72c7bc1c3acb84d88b9eeebc2118fdca",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-03 10:14:41",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "4f5dfa74b018824d5f61a885c75cf00d",
                "cert_name": "CN=oOidlqYBthcIszdaTfF, OU=DLGBuVPAzqxzmLQj, O=ayYLjXnXpEu, L=NvHWGKZYobBZFtqnR, ST=CoTCVliWaCb, C=oaxCYIDJZQMu",
                "createtime": "2025-12-03 10:13:25",
                "md5": "c0a7439b943acf7c99128024d7d5fca8",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-04 01:16:21",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "3a60f8d821ab05342a7408f8328a6cb5",
                "cert_name": "CN=zjBczNrcDTAItv, OU=oGBMyybInOcmgYwsS, O=WHDRBBwTeCnurqd, L=VlCnorLjKxIdqqfseX, ST=UFxkCApCMWoylfmvAJ, C=aZGJoqPQxSQoM",
                "createtime": "2025-12-03 10:11:58",
                "md5": "8dca00f5b33c3ef6a9951be606fe50c9",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-03 10:12:41",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "a5a61bb375045df677b83e8b340e413d",
                "cert_name": "CN=HtSRbMCJdIcOjHU, OU=gLghbgdJKoYmXy, O=LtSTinwsAoe, L=WogTtCuhKNpaoq, ST=pirfJbMFRaoo, C=uHVkSusDGobgP",
                "createtime": "2025-12-03 10:11:28",
                "md5": "f5eade53c77ea4781159a8b7264b663d",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-03 10:11:41",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "cad07e8e0276eec8bb04aca97563446a",
                "cert_name": "CN=HSKNazkMYzH, OU=roJEMwwUKip, O=RInnWtEStiBpkz, L=HFYYVoHolFGmraKWi, ST=HDVkQdLHisrPEktjF, C=CqUVAACgfBGQYA",
                "createtime": "2025-12-03 10:10:36",
                "md5": "65f7ff4a7fe1869f6b32f642c1ea404d",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-03 10:10:41",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "f595c8d6043b5221e3b2e96ee65d934f",
                "cert_name": "CN=GHOhyDDPTTzIJCLu, OU=lzCFlqCfkQKEdWv, O=ffoGrwLTZqRrTjDXqdCZ, L=lMtRZVqaPI, ST=mmpBIBaQLdaUtDZA, C=OTYNUnkdzVt",
                "createtime": "2025-12-03 10:10:07",
                "md5": "7b074f2b38964f85f8e62d977fa63f77",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-04 01:16:16",
                "version": "1.0.0",
                "version_code": 172
            },
            {
                "cert_md5": "b515bc83fe734ab1f3dcbe7dcbf8de92",
                "cert_name": "CN=gqVQDtkUyJVEUrM, OU=bshfddfyaHTwicsA, O=rLVzijbSqae, L=rIMtuOqzndGiT, ST=ZDmRBEswUCOtvlheUQp, C=MCKfciLJsvHjMyuko",
                "createtime": "2025-12-03 10:10:00",
                "md5": "38570b746c03a289165f662004125cab",
                "mfsha1": "",
                "name": "𝕻������𝕺",
                "uid": "singansfg.qahlrpusci.sdancsuhsfj",
                "updatetime": "2025-12-03 10:10:41",
                "version": "1.0.0",
                "version_code": 172
            }
        ],
        "total": 9595
    }
}

业务异常响应

{
    "code": "AB00500",
    "reason": "CODEC",
    "message": "unregister Content-Type: ",
    "data": null
}