From c71fd30c8a4baa873b27044546822b7e9084ad62 Mon Sep 17 00:00:00 2001
From: SolitudePy <47316655+SolitudePy@users.noreply.github.com>
Date: Sat, 7 Jun 2025 21:58:43 +0300
Subject: [PATCH] shortcut class name

---
 .../framework/plugins/windows/unhooked_system_calls.py        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/volatility3/framework/plugins/windows/unhooked_system_calls.py b/volatility3/framework/plugins/windows/unhooked_system_calls.py
index fa88f5523..70219da13 100644
--- a/volatility3/framework/plugins/windows/unhooked_system_calls.py
+++ b/volatility3/framework/plugins/windows/unhooked_system_calls.py
@@ -3,7 +3,7 @@
 #
 import logging
 from volatility3.framework import interfaces, deprecation
-from volatility3.plugins.windows import malware
+from volatility3.plugins.windows.malware import unhooked_system_calls as unhooked_syscalls
 
 vollog = logging.getLogger(__name__)
 
@@ -11,7 +11,7 @@ vollog = logging.getLogger(__name__)
 class unhooked_system_calls(
     interfaces.plugins.PluginInterface,
     deprecation.PluginRenameClass,
-    replacement_class=malware.unhooked_system_calls.UnhookedSystemCalls,
+    replacement_class=unhooked_syscalls.UnhookedSystemCalls,
     removal_date="2026-06-07",
 ):
     """Detects hooked ntdll.dll stub functions in Windows processes (deprecated)."""