If its encrypted with SHA-3.. Good luck finding or making a working de-crypter which isnt a rat. I know that the session ID is used for the Minecraft realms. Also I dont think it would be stored as a "physical" file. It would be more of a test which creates an instance to check whether or not the account is premium which is stored in a database. But what you said might be valid just not sure