value: Agent.btz creates a file named thumb.dd on all USB flash drives connected to the victim. This file contains information about the infected system and activity logs. 
name: Exfiltration Over Physical Medium: Exfiltration Over Usb