[
  {
    "relation": ["delegate_permission/common.handle_all_urls"],
    "target": {
      "namespace": "android_app",
      "package_name": "com.attacker.twapoc",
      "sha256_cert_fingerprints": [
        "REPLACE:WITH:SHA256:OF:malicious-app/app/poc.keystore:CERT"
      ]
    }
  }
]