Google Quick Share Spawning System Shell - Possible Exploitation

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

Detects unexpected registry modifications (creation, deletion, or modification) performed by processes associated with 'Nearby Share' (quick_share.exe, nearby_sharing.exe). Legitimate registry activity related to Google Nearby Share or Windows native Nearby Sharing is excluded from this alert.