diff --git a/volatility3/framework/symbols/windows/extensions/__init__.py b/volatility3/framework/symbols/windows/extensions/__init__.py
index b317f7693..ccfcb4290 100755
--- a/volatility3/framework/symbols/windows/extensions/__init__.py
+++ b/volatility3/framework/symbols/windows/extensions/__init__.py
@@ -450,7 +450,12 @@ class ETHREAD(objects.StructType):
 
     def owning_process(self) -> interfaces.objects.ObjectInterface:
         """Return the EPROCESS that owns this thread."""
-        return self.Tcb.Process.dereference().cast("_EPROCESS")
+        if(self.has_member("ThreadsProcess")):
+            return self.ThreadsProcess.dereference().cast("_EPROCESS")
+        elif(self.has_member("Tcb") and self.Tcb.has_member("Process")):
+            return self.Tcb.Process.dereference().cast("_EPROCESS")
+        else:
+            raise AttributeError("Unable to find the owning process of ethread")
 
     def get_cross_thread_flags(self) -> str:
         dictCrossThreadFlags = {