Windows utility used by malware in new information theft campaigns