[{
  "relation": ["delegate_permission/common.handle_all_urls"],
  "target": {
    "namespace": "android_app",
    "package_name": "com.attacker.twapoc",
    "sha256_cert_fingerprints": [
      "REPLACE:WITH:SHA256:OF:malicious-app:SIGNING:CERT"
    ]
  }
}]