diff --git a/Indian/APT/Donot/17-09-19/Images/3/Anti-sandbox.PNG b/Indian/APT/Donot/17-09-19/Images/3/Anti-sandbox.PNG new file mode 100644 index 0000000..8c05652 Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/Anti-sandbox.PNG differ diff --git a/Indian/APT/Donot/17-09-19/Images/3/Hijack.png b/Indian/APT/Donot/17-09-19/Images/3/Hijack.png new file mode 100644 index 0000000..fe381e1 Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/Hijack.png differ diff --git a/Indian/APT/Donot/17-09-19/Images/3/Infos.PNG b/Indian/APT/Donot/17-09-19/Images/3/Infos.PNG new file mode 100644 index 0000000..8932796 Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/Infos.PNG differ diff --git a/Indian/APT/Donot/17-09-19/Images/3/Inj.PNG b/Indian/APT/Donot/17-09-19/Images/3/Inj.PNG new file mode 100644 index 0000000..5df5802 Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/Inj.PNG differ diff --git a/Indian/APT/Donot/17-09-19/Images/3/Main.png b/Indian/APT/Donot/17-09-19/Images/3/Main.png new file mode 100644 index 0000000..f9b5307 Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/Main.png differ diff --git a/Indian/APT/Donot/17-09-19/Images/3/RTFInfo.PNG b/Indian/APT/Donot/17-09-19/Images/3/RTFInfo.PNG new file mode 100644 index 0000000..1dd11fa Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/RTFInfo.PNG differ diff --git a/Indian/APT/Donot/17-09-19/Images/3/VirtualProtect.PNG b/Indian/APT/Donot/17-09-19/Images/3/VirtualProtect.PNG new file mode 100644 index 0000000..8b1417c Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/VirtualProtect.PNG differ diff --git a/Indian/APT/Donot/17-09-19/Images/3/WriteFile.PNG b/Indian/APT/Donot/17-09-19/Images/3/WriteFile.PNG new file mode 100644 index 0000000..d94ffb3 Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/WriteFile.PNG differ diff --git a/Indian/APT/Donot/17-09-19/Images/3/connect.PNG b/Indian/APT/Donot/17-09-19/Images/3/connect.PNG new file mode 100644 index 0000000..6ff09a5 Binary files /dev/null and b/Indian/APT/Donot/17-09-19/Images/3/connect.PNG differ