Piyasadaki güncel hile jarı linki: https://workupload.com/file/7EcDKrHUcMR
Piyasadaki güncel hile jarı linki 2: https://workupload.com/file/3CKyEM2umyW

Kullandıkları classloader hook kodu;

jclass url_class = env->FindClass("java/net/URL");
    jmethodID url_ctor = env->GetMethodID(url_class, "<init>", "(Ljava/lang/String;)V");
    jobject url_obj = env->NewObject(url_class, url_ctor, env->NewStringUTF("file:///thatfile.jar"));
    jclass url_class_array = env->FindClass("[Ljava/net/URL;");
    jobjectArray urls = env->NewObjectArray(1, url_class, url_obj);
    env->SetObjectArrayElement(urls, 0, url_obj);
    jclass url_class_loader_class = env->FindClass("java/net/URLClassLoader");
    jmethodID url_class_loader_ctor = env->GetMethodID(url_class_loader_class, "<init>", "([Ljava/net/URL;)V");
    jobject class_loader_obj = env->NewObject(url_class_loader_class, url_class_loader_ctor, urls);
    jmethodID loadClassId = env->GetMethodID(url_class_loader_class, "loadClass", "(Ljava/lang/String;)Ljava/lang/Class;");
    jclass javaLangClass = env->FindClass("java/lang/Class");
    jmethodID forName = env->GetStaticMethodID(javaLangClass, "forName", "(Ljava/lang/String;ZLjava/lang/ClassLoader;)Ljava/lang/Class;");
    jstring className = env->NewStringUTF("gov.babalar.Main");
    jboolean initialize = JNI_TRUE;
    jclass myClass = (jclass)env->CallStaticObjectMethod(javaLangClass, forName, className, initialize, class_loader_obj);