﻿{
    "isAdmin":  false,
    "searchJob":  {
                      "currentRoot":  "C:",
                      "id":  "scan-20260621-213304",
                      "startedAt":  "2026-06-21T21:33:05.5527554+02:00",
                      "roots":  [
                                    "C:\\Users\\Paterna",
                                    "C:\\xampp",
                                    "C:\\Program Files",
                                    "C:\\Program Files (x86)",
                                    "C:\\Users\\Paterna\\AppData\\Roaming\\npm",
                                    "C:\\Users\\Paterna\\AppData\\Local\\Programs",
                                    "C:\\Users\\Paterna\\Desktop",
                                    "C:"
                                ],
                      "includeAllExtensions":  true,
                      "error":  null,
                      "isAdmin":  false,
                      "finishedAt":  "2026-06-21T21:43:03.5370079+02:00",
                      "scannedFiles":  1169875,
                      "found":  656553,
                      "status":  "completed"
                  },
    "optimization":  [
                         {
                             "id":  "opt-1",
                             "priority":  "medium",
                             "area":  "services",
                             "title":  "Servicio Auto detenido: Avira Fallback Updater",
                             "detail":  "Considera cambiar a Manual si no lo usas",
                             "serviceName":  "AviraFallbackUpdater",
                             "action":  "set-manual"
                         },
                         {
                             "id":  "opt-2",
                             "priority":  "medium",
                             "area":  "services",
                             "title":  "Servicio Auto detenido: Avira Security Updater",
                             "detail":  "Considera cambiar a Manual si no lo usas",
                             "serviceName":  "AviraSecurityUpdater",
                             "action":  "set-manual"
                         },
                         {
                             "id":  "opt-3",
                             "priority":  "medium",
                             "area":  "services",
                             "title":  "Servicio Auto detenido: Microsoft Edge Update Service (edgeupdate)",
                             "detail":  "Considera cambiar a Manual si no lo usas",
                             "serviceName":  "edgeupdate",
                             "action":  "set-manual"
                         },
                         {
                             "id":  "opt-4",
                             "priority":  "medium",
                             "area":  "services",
                             "title":  "Servicio Auto detenido: Servicio de herramienta de actualización de Google (GoogleUpdaterService150.0.7863.0)",
                             "detail":  "Considera cambiar a Manual si no lo usas",
                             "serviceName":  "GoogleUpdaterService150.0.7863.0",
                             "action":  "set-manual"
                         }
                     ],
    "startup":  [
                    {
                        "name":  "RoyalBrokerStartup",
                        "command":  "RoyalBrokerStartup.cmd",
                        "location":  "Startup"
                    },
                    {
                        "name":  "",
                        "command":  "",
                        "location":  "HKU\\S-1-5-21-4074680175-3698022454-2369089775-1001\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
                    },
                    {
                        "name":  "AnyDesk",
                        "command":  "C:\\PROGRA~1\\AnyDesk\\AnyDesk.exe  --control",
                        "location":  "Common Startup"
                    },
                    {
                        "name":  "Tailscale",
                        "command":  "C:\\PROGRA~1\\TAILSC~1\\TAILSC~1.EXE ",
                        "location":  "Common Startup"
                    },
                    {
                        "name":  "",
                        "command":  "",
                        "location":  "HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
                    }
                ],
    "reportPath":  "C:\\xampp\\htdocs\\cursor-mobile-bridge\\data\\reports\\report-20260710-215115.md",
    "computer":  "EQUIPITELLO",
    "findings":  [

                 ],
    "generatedAt":  "2026-07-10T21:51:15.2721272+02:00",
    "index":  {
                  "updatedAt":  "2026-06-21T21:42:29.7548244+02:00",
                  "count":  500000
              },
    "portInventory":  [
                          {
                              "port":  7070,
                              "localAddress":  "::",
                              "pid":  4916,
                              "processName":  "AnyDesk",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "monitored",
                              "service":  "AnyDesk",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  7070,
                              "localAddress":  "0.0.0.0",
                              "pid":  4916,
                              "processName":  "AnyDesk",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "monitored",
                              "service":  "AnyDesk",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  35172,
                              "localAddress":  "100.78.198.98",
                              "pid":  5680,
                              "processName":  "tailscaled",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "monitored",
                              "service":  "tailscaled",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  37705,
                              "localAddress":  "fd7a:115c:a1e0::a33b:c663",
                              "pid":  5680,
                              "processName":  "tailscaled",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "monitored",
                              "service":  "tailscaled",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  80,
                              "localAddress":  "::",
                              "pid":  3600,
                              "processName":  "httpd",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "httpd",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  80,
                              "localAddress":  "0.0.0.0",
                              "pid":  3600,
                              "processName":  "httpd",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "httpd",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  139,
                              "localAddress":  "192.168.1.10",
                              "pid":  4,
                              "processName":  "System",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "System",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  443,
                              "localAddress":  "127.0.0.2",
                              "pid":  4088,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "4088",
                                                     "iphlpsvc"
                                                 ],
                              "tier":  "review",
                              "service":  "svchost",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  443,
                              "localAddress":  "0.0.0.0",
                              "pid":  3600,
                              "processName":  "httpd",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "httpd",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  443,
                              "localAddress":  "::",
                              "pid":  3600,
                              "processName":  "httpd",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "httpd",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  3000,
                              "localAddress":  "::",
                              "pid":  11704,
                              "processName":  "node",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "node",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  3306,
                              "localAddress":  "127.0.0.1",
                              "pid":  4768,
                              "processName":  "mysqld",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "mysqld",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  5040,
                              "localAddress":  "0.0.0.0",
                              "pid":  10528,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "10528",
                                                     "CDPSvc"
                                                 ],
                              "tier":  "review",
                              "service":  "svchost",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  8086,
                              "localAddress":  "::",
                              "pid":  11876,
                              "processName":  "node",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "node",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  8090,
                              "localAddress":  "127.0.0.1",
                              "pid":  11768,
                              "processName":  "python",
                              "processPath":  "C:\\Users\\Paterna\\AppData\\Local\\Programs\\Python\\Python311\\python.exe",
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "python",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  8095,
                              "localAddress":  "0.0.0.0",
                              "pid":  3964,
                              "processName":  "node",
                              "processPath":  "C:\\Program Files\\nodejs\\node.exe",
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "node",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  8096,
                              "localAddress":  "0.0.0.0",
                              "pid":  3600,
                              "processName":  "httpd",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "httpd",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  8096,
                              "localAddress":  "::",
                              "pid":  3600,
                              "processName":  "httpd",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "httpd",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  9080,
                              "localAddress":  "::",
                              "pid":  3600,
                              "processName":  "httpd",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "httpd",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  9080,
                              "localAddress":  "0.0.0.0",
                              "pid":  3600,
                              "processName":  "httpd",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "review",
                              "service":  "httpd",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  135,
                              "localAddress":  "0.0.0.0",
                              "pid":  1516,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "1516",
                                                     "RpcEptMapper",
                                                     "RpcSs"
                                                 ],
                              "tier":  "system",
                              "service":  "svchost",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  135,
                              "localAddress":  "::",
                              "pid":  1516,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "1516",
                                                     "RpcEptMapper",
                                                     "RpcSs"
                                                 ],
                              "tier":  "system",
                              "service":  "svchost",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  445,
                              "localAddress":  "::",
                              "pid":  4,
                              "processName":  "System",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "system",
                              "service":  "System",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  5357,
                              "localAddress":  "::",
                              "pid":  4,
                              "processName":  "System",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "system",
                              "service":  "System",
                              "explain":  "Puerto no catalogado — identificar proceso y contenedor",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49664,
                              "localAddress":  "0.0.0.0",
                              "pid":  1264,
                              "processName":  "lsass",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "system",
                              "service":  "lsass",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49664,
                              "localAddress":  "::",
                              "pid":  1264,
                              "processName":  "lsass",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "system",
                              "service":  "lsass",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49665,
                              "localAddress":  "::",
                              "pid":  1084,
                              "processName":  "wininit",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "system",
                              "service":  "wininit",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49665,
                              "localAddress":  "0.0.0.0",
                              "pid":  1084,
                              "processName":  "wininit",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "system",
                              "service":  "wininit",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49666,
                              "localAddress":  "::",
                              "pid":  2012,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "2012",
                                                     "Schedule"
                                                 ],
                              "tier":  "system",
                              "service":  "svchost",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49666,
                              "localAddress":  "0.0.0.0",
                              "pid":  2012,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "2012",
                                                     "Schedule"
                                                 ],
                              "tier":  "system",
                              "service":  "svchost",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49667,
                              "localAddress":  "::",
                              "pid":  2556,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "2556",
                                                     "EventLog"
                                                 ],
                              "tier":  "system",
                              "service":  "svchost",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49667,
                              "localAddress":  "0.0.0.0",
                              "pid":  2556,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "2556",
                                                     "EventLog"
                                                 ],
                              "tier":  "system",
                              "service":  "svchost",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49673,
                              "localAddress":  "::",
                              "pid":  1212,
                              "processName":  "services",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "system",
                              "service":  "services",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49673,
                              "localAddress":  "0.0.0.0",
                              "pid":  1212,
                              "processName":  "services",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  {

                                                 },
                              "tier":  "system",
                              "service":  "services",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49674,
                              "localAddress":  "::",
                              "pid":  7664,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "7664",
                                                     "PolicyAgent"
                                                 ],
                              "tier":  "system",
                              "service":  "svchost",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          },
                          {
                              "port":  49674,
                              "localAddress":  "0.0.0.0",
                              "pid":  7664,
                              "processName":  "svchost",
                              "processPath":  null,
                              "processExplain":  "Proceso sin ficha — revisa ruta y firma digital.",
                              "hostedServices":  [
                                                     "7664",
                                                     "PolicyAgent"
                                                 ],
                              "tier":  "system",
                              "service":  "svchost",
                              "explain":  "Puerto dinámico/ephemeral Windows (RPC, servicios internos)",
                              "spoofRisk":  "unknown",
                              "pathLegitimate":  true
                          }
                      ],
    "markdown":  "# Informe System Manager — EQUIPITELLO\r\nGenerado: 2026-07-10 21:51:15\r\nUsuario: Paterna\r\nAdmin: False\r\n\r\n## Resumen\r\n- Índice búsqueda: 500000 archivos (actualizado: 2026-06-21T21:42:29.7548244+02:00)\r\n- Escaneo: completed · 656553 encontrados\r\n- Hallazgos seguridad reales: 0 (0 críticos)\r\n- Puertos escuchando (inventario): 36\r\n- Recomendaciones optimización: 4\r\n\r\n## Seguridad (solo alertas reales — sin Docker/Tailscale/AnyDesk rutinarios)\n_Sin hallazgos activos tras filtrar falsos positivos._\n\n\n## Inventario de puertos (origen y explicación)\n- **:7070** [monitored] AnyDesk — AnyDesk (PID 4916)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:7070** [monitored] AnyDesk — AnyDesk (PID 4916)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:35172** [monitored] tailscaled — tailscaled (PID 5680)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:37705** [monitored] tailscaled — tailscaled (PID 5680)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:80** [review] httpd — httpd (PID 3600)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:80** [review] httpd — httpd (PID 3600)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:139** [review] System — System (PID 4)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:443** [review] httpd — httpd (PID 3600)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:443** [review] httpd — httpd (PID 3600)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:443** [review] svchost — svchost (PID 4088) · servicios: 4088, iphlpsvc\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:3000** [review] node — node (PID 11704)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:3306** [review] mysqld — mysqld (PID 4768)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:5040** [review] svchost — svchost (PID 10528) · servicios: 10528, CDPSvc\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:8086** [review] node — node (PID 11876)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:8090** [review] python — python (PID 11768)\n  - Puerto no catalogado — identificar proceso y contenedor\n  - Ruta: C:\\Users\\Paterna\\AppData\\Local\\Programs\\Python\\Python311\\python.exe\n- **:8095** [review] node — node (PID 3964)\n  - Puerto no catalogado — identificar proceso y contenedor\n  - Ruta: C:\\Program Files\\nodejs\\node.exe\n- **:8096** [review] httpd — httpd (PID 3600)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:8096** [review] httpd — httpd (PID 3600)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:9080** [review] httpd — httpd (PID 3600)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:9080** [review] httpd — httpd (PID 3600)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:135** [system] svchost — svchost (PID 1516) · servicios: 1516, RpcEptMapper, RpcSs\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:135** [system] svchost — svchost (PID 1516) · servicios: 1516, RpcEptMapper, RpcSs\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:445** [system] System — System (PID 4)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:5357** [system] System — System (PID 4)\n  - Puerto no catalogado — identificar proceso y contenedor\n- **:49664** [system] lsass — lsass (PID 1264)\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49664** [system] lsass — lsass (PID 1264)\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49665** [system] wininit — wininit (PID 1084)\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49665** [system] wininit — wininit (PID 1084)\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49666** [system] svchost — svchost (PID 2012) · servicios: 2012, Schedule\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49666** [system] svchost — svchost (PID 2012) · servicios: 2012, Schedule\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49667** [system] svchost — svchost (PID 2556) · servicios: 2556, EventLog\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49667** [system] svchost — svchost (PID 2556) · servicios: 2556, EventLog\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49673** [system] services — services (PID 1212)\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49673** [system] services — services (PID 1212)\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49674** [system] svchost — svchost (PID 7664) · servicios: 7664, PolicyAgent\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n- **:49674** [system] svchost — svchost (PID 7664) · servicios: 7664, PolicyAgent\n  - Puerto dinámico/ephemeral Windows (RPC, servicios internos)\n\n## Optimización arranque y servicios\n- **[medium]** Servicio Auto detenido: Microsoft Edge Update Service (edgeupdate): Considera cambiar a Manual si no lo usas\n- **[medium]** Servicio Auto detenido: Servicio de herramienta de actualización de Google (GoogleUpdaterService150.0.7863.0): Considera cambiar a Manual si no lo usas\n- **[medium]** Servicio Auto detenido: Avira Fallback Updater: Considera cambiar a Manual si no lo usas\n- **[medium]** Servicio Auto detenido: Avira Security Updater: Considera cambiar a Manual si no lo usas\n\n## Arranque configurado (5)\n- RoyalBrokerStartup: RoyalBrokerStartup.cmd\n- AnyDesk: C:\\PROGRA~1\\AnyDesk\\AnyDesk.exe  --control\n- Tailscale: C:\\PROGRA~1\\TAILSC~1\\TAILSC~1.EXE \n\n## Procesos top RAM\n- powershell (PID 21280) 1714MB · C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\n- chrome (PID 14532) 567MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- notepad++ (PID 3744) 552MB · C:\\Program Files\\Notepad++\\notepad++.exe\n- chrome (PID 13276) 441MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 14368) 364MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- endpointprotection (PID 5068) 355MB · \n- chrome (PID 18380) 348MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 16444) 312MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 18956) 297MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 19076) 297MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 9200) 255MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- explorer (PID 6236) 226MB · C:\\WINDOWS\\Explorer.EXE\n- chrome (PID 22400) 218MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 15460) 218MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 6484) 210MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n\r\n---\r\n_Informe avanzado con inventario de puertos y filtrado de falsos positivos._\r\n_Pega en Cursor Chat o usa Ollama local para análisis adicional._",
    "user":  "Paterna"
}
