APK的 FPHASH 反查样本查询
接口说明
接口提供基于 FPHASH (对 APK 样本提取出 FPHASH) 的反查功能。
推荐应用场景
样本聚合
请求地址
https://api.f.360.cn/files/apk/v1/fp_hash
请求方法
POST
请求参数
| 参数名 | 类型 | 位置 | 是否必填 | 示例值 | 说明 |
|---|---|---|---|---|---|
| fp_hash | string | body | 是 | 7d4f0bbfdc2b8a047fdca5d011599bad | APK文件的fphash |
响应参数
| 名称 | 类型 | 示例值 | 描述 |
|---|---|---|---|
| cert_md5 | string | 9ccc3cefbfcdc99fc7ae9d00067b8f79 | APK 文件证书 MD5 |
| cert_name | string | CN=IdMpnfBfWyHsTSXy, OU=LGRvVGuOnvAwM, O=mYVhTstHVfQ, L=MRJqwhNfAj, ST=ysyggaGOBD, C=XrpsCouvhPTUQq | APK 文件证书名 |
| md5 | string | cac005017de754d53e71a545326e8945 | APK 文件 MD5 |
| mfsha1 | string | 6f06f041e442a477e6889ff59ad3f1c6b42b73c8 | APK 文件mfsha1 |
| name | string | ψलग | APK 应用名 |
| uid | string | adede92457d8a.a43d3b18e8f2d.accebbc6faaad | APK 包名 |
| version | string | 1.0.0 | APK 版本 |
| version_code | number | 172 | APK 版本号 |
请求示例
支持cUrl、Python、Java、PHP、Go语言的请求，示例如下
#!/usr/bin/env bash
set -euo pipefail
APPID="" # apikey
SECRET="" # salt
URL="https://api.f.360.cn/files/apk/v1/fp_hash"
BODY='{"fp_hash":"7d4f0bbfdc2b8a047fdca5d011599bad"}'
NONCE=$(printf '%08d' $((RANDOM % 100000000)))
TIMESTAMP=$(date +%s)
BODY_MD5=$(printf '%s' "$BODY" | openssl dgst -md5 -hex | awk '{print $NF}')
SIGNATURE=$(printf '%s' "${BODY_MD5}${APPID}${NONCE}${TIMESTAMP}${SECRET}" | openssl dgst -md5 -hex | awk '{print $NF}')
SIGNATURE=${SIGNATURE:16}
curl --location --request POST "$URL" \
--header "Content-Type: application/json" \
--header "X-360-Key: ${APPID}" \
--header "X-360-Nonce: ${NONCE}" \
--header "X-360-Timestamp: ${TIMESTAMP}" \
--header "X-360-Signature: ${SIGNATURE}" \
--data "${BODY}"# python3.6.8
import hashlib
import json
import random
import time
import requests
APPID = "" # apikey
SECRET = "" # salt
def make_headers(appid, secret, body):
headers = {}
headers["X-360-Key"] = appid
headers["X-360-Nonce"] = str(random.randint(0, 99999999)).zfill(8)
headers["X-360-Timestamp"] = str(int(time.time()))
s = (
hashlib.md5(body.encode("utf8")).hexdigest()
+ headers["X-360-Key"]
+ headers["X-360-Nonce"]
+ headers["X-360-Timestamp"]
+ secret
)
md5 = hashlib.md5(s.encode("utf8")).hexdigest()
headers["X-360-Signature"] = md5[16:]
headers["Content-Type"] = "application/json"
return headers
def do_post(url, body):
res = requests.post(
url,
data=json.dumps(params),
headers=make_headers(APPID, SECRET, json.dumps(body)),
)
print(res.text)
if __name__ == "__main__":
# 请求地址
url = "https://api.f.360.cn/files/apk/v1/fp_hash"
# 查询参数
params = {"fp_hash": "7d4f0bbfdc2b8a047fdca5d011599bad"}
do_post(url, params)import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import java.util.concurrent.ThreadLocalRandom;
public class Demo {
static String md5(String input) throws Exception {
byte[] digest = MessageDigest.getInstance("MD5")
.digest(input.getBytes(StandardCharsets.UTF_8));
StringBuilder sb = new StringBuilder();
for (byte b : digest) {
sb.append(String.format("%02x", b & 0xff));
}
return sb.toString();
}
public static void main(String[] args) throws Exception {
String appid = ""; // apikey
String secret = ""; // salt
String url = "https://api.f.360.cn/files/apk/v1/fp_hash";
String body = "{\"fp_hash\":\"7d4f0bbfdc2b8a047fdca5d011599bad\"}";
String nonce = String.format("%08d", ThreadLocalRandom.current().nextInt(100000000));
String timestamp = String.valueOf(System.currentTimeMillis() / 1000);
String signature = md5(md5(body) + appid + nonce + timestamp + secret).substring(16);
HttpRequest request = HttpRequest.newBuilder()
.uri(URI.create(url))
.header("Content-Type", "application/json")
.header("X-360-Key", appid)
.header("X-360-Nonce", nonce)
.header("X-360-Timestamp", timestamp)
.header("X-360-Signature", signature)
.POST(HttpRequest.BodyPublishers.ofString(body, StandardCharsets.UTF_8))
.build();
HttpClient client = HttpClient.newHttpClient();
HttpResponse<String> response = client.send(
request, HttpResponse.BodyHandlers.ofString(StandardCharsets.UTF_8));
System.out.println(response.body());
}
}<?php
// apikey
$appid = "";
// salt
$secret = "";
$url = 'https://api.f.360.cn/files/apk/v1/fp_hash';
$body = json_encode(['fp_hash' => '7d4f0bbfdc2b8a047fdca5d011599bad'], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
$nonce = str_pad((string) random_int(0, 99999999), 8, "0", STR_PAD_LEFT);
$timestamp = (string) time();
$signature = substr(md5(md5($body) . $appid . $nonce . $timestamp . $secret), 16);
$ch = curl_init($url);
$options = [
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-360-Key: {$appid}",
"X-360-Nonce: {$nonce}",
"X-360-Timestamp: {$timestamp}",
"X-360-Signature: {$signature}",
],
];
$options[CURLOPT_POST] = true;
$options[CURLOPT_POSTFIELDS] = $body;
curl_setopt_array($ch, $options);
$response = curl_exec($ch);
if ($response === false) {
echo curl_error($ch), PHP_EOL;
} else {
echo $response, PHP_EOL;
}
curl_close($ch);package main
import (
"bytes"
"crypto/md5"
"encoding/hex"
"fmt"
"io"
"math/rand"
"net/http"
"time"
)
func md5Hex(s string) string {
sum := md5.Sum([]byte(s))
return hex.EncodeToString(sum[:])
}
func main() {
appid := "" // apikey
secret := "" // salt
url := "https://api.f.360.cn/files/apk/v1/fp_hash"
body := []byte(`{"fp_hash":"7d4f0bbfdc2b8a047fdca5d011599bad"}`)
nonce := fmt.Sprintf("%08d", rand.Intn(100000000))
timestamp := fmt.Sprintf("%d", time.Now().Unix())
signature := md5Hex(md5Hex(string(body)) + appid + nonce + timestamp + secret)[16:]
req, err := http.NewRequest(http.MethodPost, url, bytes.NewReader(body))
if err != nil {
panic(err)
}
req.Header.Set("Content-Type", "application/json")
req.Header.Set("X-360-Key", appid)
req.Header.Set("X-360-Nonce", nonce)
req.Header.Set("X-360-Timestamp", timestamp)
req.Header.Set("X-360-Signature", signature)
resp, err := http.DefaultClient.Do(req)
if err != nil {
panic(err)
}
defer resp.Body.Close()
respBody, err := io.ReadAll(resp.Body)
if err != nil {
panic(err)
}
fmt.Println(string(respBody))
}响应示例
业务正常响应
{
"code": "0",
"reason": "",
"message": "",
"data": {
"info": [
{
"cert_md5": "9ccc3cefbfcdc99fc7ae9d00067b8f79",
"cert_name": "CN=IdMpnfBfWyHsTSXy, OU=LGRvVGuOnvAwM, O=mYVhTstHVfQ, L=MRJqwhNfAj, ST=ysyggaGOBD, C=XrpsCouvhPTUQq",
"createtime": "2025-12-02 04:32:54",
"md5": "cac005017de754d53e71a545326e8945",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 04:33:00",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "d9544c1092e254dbb0e0334fc7147b46",
"cert_name": "CN=nyXAwXJiBO, OU=uicfjQimRTeGTkQYae, O=YodXlDiCPEhed, L=bKEGyrQbKXb, ST=CboPNzvpTUmIev, C=dScOhMYGoqiLb",
"createtime": "2025-12-02 04:32:18",
"md5": "265d1cf41124eefad514034f67789e60",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 04:32:25",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "e2b5007aeaf8ca65073a17e7f5f442de",
"cert_name": "CN=bBzgGonxbfymGoQTPEp, OU=ShfbxuHdUjyXfcuNwYHC, O=DCzqljHPBaMEJi, L=jlGrdLfsprxhXDx, ST=JigtQfgwqTlsMu, C=wRwxWYYRIQFU",
"createtime": "2025-12-02 04:30:43",
"md5": "fb06772d0f93eede9fdd7032fe8d71b9",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 04:30:55",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "1a59fb13b74fb5ef814ef693e413836c",
"cert_name": "CN=tlbxHBudjNOmyA, OU=PuxbEYgIUvlrVStAT, O=kcCptGsgUlmaAjIpXj, L=aPHwjRoSOUtJB, ST=tqKVIHmfTEac, C=jVkYWEhXoTQMJxO",
"createtime": "2025-12-02 04:30:39",
"md5": "4a00b33085e4c8d4cc3b06007c79fa38",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 04:30:45",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "c66cb822ff91192c39aa6e3fe03e8ffd",
"cert_name": "CN=aiHxvFvghOtJINJ, OU=DfqrrpJOCGm, O=zlTAAMNpGHebfQKXZbaq, L=ekoabmTcokRlmIv, ST=qauudzpewXOyRm, C=fqNcpDBHasqbagjhfkZM",
"createtime": "2025-12-02 04:29:56",
"md5": "8e446afbc5a1c0157b4a59f8e5f5031c",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 04:30:00",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "3485c6f1527dc487d0c4c43e2d26e3b5",
"cert_name": "CN=rGnkTAyuJPsWkQzedEGq, OU=uOecxqSKBUgTJoi, O=aRoDVDOWUgZqEW, L=cYUmCeAMHLB, ST=EcxNWyJYXRGvNxtNbs, C=GjpwqZMxLKWcrkTm",
"createtime": "2025-12-02 04:29:06",
"md5": "ca0a11f7140430fcd787bbf1feedc002",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 04:29:11",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "25ec7b09325c20bf5d30b9bfa6fd64af",
"cert_name": "CN=TytpnewPFMfcXsWyGUjs, OU=dTpZtmwreWWxtZyDgGM, O=JZvpbzdhVfjZSo, L=uaRftRONPrfCXE, ST=plKtgeVxIB, C=aefRZUnyRXRI",
"createtime": "2025-12-02 04:28:00",
"md5": "10d685058778e29bc994b8b0db760b7b",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 04:28:05",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "ec33b183af196359cf7d6855b469da1e",
"cert_name": "CN=JwjnuFyVUOjdnNn, OU=nakqNwKWFDjGl, O=HKXBJLElGhpdD, L=NDiHVacTBFeMqk, ST=bMDlPsDiYB, C=mzXdwppKdM",
"createtime": "2025-12-02 04:27:54",
"md5": "0eea9f58c285225ee28315ab5788c7c2",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 04:28:00",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "98bcda9634a9b748720c336b59eae381",
"cert_name": "CN=fWiwYQBJBfZikSqqq, OU=bJNcbCMtCOzjBAFpzgRz, O=rlbPtAKcHxE, L=ldntZhIuTUwpMbcLOso, ST=VlLtSWwDwJMcMIIkbD, C=IkVdyZJlZUWU",
"createtime": "2025-12-02 04:27:06",
"md5": "aa37956f452e2926170ec1596490b06d",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 10:11:09",
"version": "1.0.0",
"version_code": 172
},
{
"cert_md5": "f63b1feb70fea5472fe5d98e1fa33f4a",
"cert_name": "CN=gSnihRkCZwbMzr, OU=pxwZIBeMOMimmny, O=uRxmufisxmSRmBD, L=NDKeHFcLtwiyIJisZH, ST=qpWDpmVesQfIBn, C=sgUOAuTmuydwdGRJMb",
"createtime": "2025-12-02 04:26:06",
"md5": "6db64fd4816dedff9dbdc2ffdcc90b3a",
"mfsha1": "",
"name": "ψलग",
"safe": [],
"spread_cnt": 0,
"uid": "adede92457d8a.a43d3b18e8f2d.accebbc6faaad",
"updatetime": "2025-12-02 10:11:21",
"version": "1.0.0",
"version_code": 172
}
],
"total": 56
}
}业务异常响应
{
"code": "AB00500",
"reason": "CODEC",
"message": "unregister Content-Type: ",
"data": null
}