Regini.exe

Used to manipulate the registry

ADS

Write to registry

regini.exe {PATH}:hidden.ini

Write registry keys from data inside the Alternate data stream. — MITRE: T1564.004 — Privileges: User