{
    "isAdmin":  false,
    "searchJob":  {
                      "currentRoot":  "C:",
                      "id":  "scan-20260621-213304",
                      "startedAt":  "2026-06-21T21:33:05.5527554+02:00",
                      "roots":  [
                                    "C:\\Users\\Paterna",
                                    "C:\\xampp",
                                    "C:\\Program Files",
                                    "C:\\Program Files (x86)",
                                    "C:\\Users\\Paterna\\AppData\\Roaming\\npm",
                                    "C:\\Users\\Paterna\\AppData\\Local\\Programs",
                                    "C:\\Users\\Paterna\\Desktop",
                                    "C:"
                                ],
                      "includeAllExtensions":  true,
                      "error":  null,
                      "isAdmin":  false,
                      "finishedAt":  "2026-06-21T21:43:03.5370079+02:00",
                      "scannedFiles":  1169875,
                      "found":  656553,
                      "status":  "completed"
                  },
    "optimization":  [
                         {
                             "id":  "opt-1",
                             "priority":  "medium",
                             "area":  "services",
                             "title":  "Servicio Auto detenido: Avira Fallback Updater",
                             "detail":  "Considera cambiar a Manual si no lo usas",
                             "serviceName":  "AviraFallbackUpdater",
                             "action":  "set-manual"
                         },
                         {
                             "id":  "opt-2",
                             "priority":  "medium",
                             "area":  "services",
                             "title":  "Servicio Auto detenido: Avira Security Updater",
                             "detail":  "Considera cambiar a Manual si no lo usas",
                             "serviceName":  "AviraSecurityUpdater",
                             "action":  "set-manual"
                         },
                         {
                             "id":  "opt-3",
                             "priority":  "medium",
                             "area":  "services",
                             "title":  "Servicio Auto detenido: Microsoft Edge Update Service (edgeupdate)",
                             "detail":  "Considera cambiar a Manual si no lo usas",
                             "serviceName":  "edgeupdate",
                             "action":  "set-manual"
                         },
                         {
                             "id":  "opt-4",
                             "priority":  "medium",
                             "area":  "services",
                             "title":  "Servicio Auto detenido: Servicio de herramienta de actualización de Google (GoogleUpdaterService150.0.7863.0)",
                             "detail":  "Considera cambiar a Manual si no lo usas",
                             "serviceName":  "GoogleUpdaterService150.0.7863.0",
                             "action":  "set-manual"
                         },
                         {
                             "id":  "opt-5",
                             "priority":  "critical",
                             "area":  "security",
                             "title":  "Resolver: Proceso en ubicación atípica: CodeSetup-stable-3.8.11",
                             "detail":  "C:\\Users\\Paterna\\AppData\\Local\\Temp\\vscode-stable-user-x64-9f1spuh364q\\CodeSetup-stable-3.8.11.exe",
                             "linkedFinding":  "sec-1",
                             "action":  "review-process"
                         },
                         {
                             "id":  "opt-6",
                             "priority":  "critical",
                             "area":  "security",
                             "title":  "Resolver: Proceso en ubicación atípica: CodeSetup-stable-3.8.11.tmp",
                             "detail":  "C:\\Users\\Paterna\\AppData\\Local\\Temp\\is-1DQTO.tmp\\CodeSetup-stable-3.8.11.tmp",
                             "linkedFinding":  "sec-2",
                             "action":  "review-process"
                         }
                     ],
    "startup":  [
                    {
                        "name":  "RoyalBrokerStartup",
                        "command":  "RoyalBrokerStartup.cmd",
                        "location":  "Startup"
                    },
                    {
                        "name":  "",
                        "command":  "",
                        "location":  "HKU\\S-1-5-21-4074680175-3698022454-2369089775-1001\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
                    },
                    {
                        "name":  "Docker Desktop",
                        "command":  "C:\\Program Files\\Docker\\Docker\\Docker Desktop.exe",
                        "location":  "HKU\\S-1-5-21-4074680175-3698022454-2369089775-1001\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
                    },
                    {
                        "name":  "AnyDesk",
                        "command":  "C:\\PROGRA~1\\AnyDesk\\AnyDesk.exe  --control",
                        "location":  "Common Startup"
                    },
                    {
                        "name":  "Tailscale",
                        "command":  "C:\\PROGRA~1\\TAILSC~1\\TAILSC~1.EXE ",
                        "location":  "Common Startup"
                    },
                    {
                        "name":  "",
                        "command":  "",
                        "location":  "HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
                    }
                ],
    "reportPath":  "C:\\xampp\\htdocs\\cursor-mobile-bridge\\data\\reports\\report-20260621-220928.md",
    "computer":  "EQUIPITELLO",
    "findings":  [
                     {
                         "id":  "sec-1",
                         "severity":  "high",
                         "category":  "suspicious-location",
                         "title":  "Proceso en ubicación atípica: CodeSetup-stable-3.8.11",
                         "detail":  "C:\\Users\\Paterna\\AppData\\Local\\Temp\\vscode-stable-user-x64-9f1spuh364q\\CodeSetup-stable-3.8.11.exe",
                         "path":  "C:\\Users\\Paterna\\AppData\\Local\\Temp\\vscode-stable-user-x64-9f1spuh364q\\CodeSetup-stable-3.8.11.exe",
                         "pid":  8476,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-2",
                         "severity":  "high",
                         "category":  "suspicious-location",
                         "title":  "Proceso en ubicación atípica: CodeSetup-stable-3.8.11.tmp",
                         "detail":  "C:\\Users\\Paterna\\AppData\\Local\\Temp\\is-1DQTO.tmp\\CodeSetup-stable-3.8.11.tmp",
                         "path":  "C:\\Users\\Paterna\\AppData\\Local\\Temp\\is-1DQTO.tmp\\CodeSetup-stable-3.8.11.tmp",
                         "pid":  2860,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-3",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :54465 — AnyDesk",
                         "detail":  "PID 24148",
                         "pid":  24148,
                         "port":  54465,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-4",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49672 — services",
                         "detail":  "PID 1300",
                         "pid":  1300,
                         "port":  49672,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-5",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49667 — svchost",
                         "detail":  "PID 2500",
                         "pid":  2500,
                         "port":  49667,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-6",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49666 — svchost",
                         "detail":  "PID 1996",
                         "pid":  1996,
                         "port":  49666,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-7",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49665 — wininit",
                         "detail":  "PID 1172",
                         "pid":  1172,
                         "port":  49665,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-8",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49664 — lsass",
                         "detail":  "PID 1348",
                         "pid":  1348,
                         "port":  49664,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-9",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :37705 — tailscaled",
                         "detail":  "PID 12376",
                         "pid":  12376,
                         "port":  37705,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-10",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :8787 — wslrelay",
                         "detail":  "PID 18396",
                         "pid":  18396,
                         "port":  8787,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-11",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :8787 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  8787,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-12",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :7070 — AnyDesk",
                         "detail":  "PID 24148",
                         "pid":  24148,
                         "port":  7070,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-13",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :5357 — System",
                         "detail":  "PID 4",
                         "pid":  4,
                         "port":  5357,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-14",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :3030 — wslrelay",
                         "detail":  "PID 18396",
                         "pid":  18396,
                         "port":  3030,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-15",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :3030 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  3030,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-16",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :135 — svchost",
                         "detail":  "PID 1604",
                         "pid":  1604,
                         "port":  135,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-17",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :54465 — AnyDesk",
                         "detail":  "PID 24148",
                         "pid":  24148,
                         "port":  54465,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-18",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49672 — services",
                         "detail":  "PID 1300",
                         "pid":  1300,
                         "port":  49672,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-19",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49667 — svchost",
                         "detail":  "PID 2500",
                         "pid":  2500,
                         "port":  49667,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-20",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49666 — svchost",
                         "detail":  "PID 1996",
                         "pid":  1996,
                         "port":  49666,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-21",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49665 — wininit",
                         "detail":  "PID 1172",
                         "pid":  1172,
                         "port":  49665,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-22",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :49664 — lsass",
                         "detail":  "PID 1348",
                         "pid":  1348,
                         "port":  49664,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-23",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :35172 — tailscaled",
                         "detail":  "PID 12376",
                         "pid":  12376,
                         "port":  35172,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-24",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :24282 — python",
                         "detail":  "PID 7728",
                         "pid":  7728,
                         "port":  24282,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-25",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :16686 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  16686,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-26",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :11434 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  11434,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-27",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :9443 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  9443,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-28",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :9090 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  9090,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-29",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :9002 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  9002,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-30",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :7700 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  7700,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-31",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :7070 — AnyDesk",
                         "detail":  "PID 24148",
                         "pid":  24148,
                         "port":  7070,
                         "action":  "review-process"
                     },
                     {
                         "id":  "sec-32",
                         "severity":  "medium",
                         "category":  "open-port",
                         "title":  "Puerto abierto :6334 — com.docker.backend",
                         "detail":  "PID 26176",
                         "pid":  26176,
                         "port":  6334,
                         "action":  "review-process"
                     }
                 ],
    "generatedAt":  "2026-06-21T22:09:28.5133309+02:00",
    "index":  {
                  "updatedAt":  "2026-06-21T21:42:29.7548244+02:00",
                  "count":  500000
              },
    "markdown":  "# Informe System Manager — EQUIPITELLO\r\nGenerado: 2026-06-21 22:09:28\r\nUsuario: Paterna\r\nAdmin: False\r\n\r\n## Resumen\r\n- Índice búsqueda: 500000 archivos (actualizado: 2026-06-21T21:42:29.7548244+02:00)\r\n- Escaneo: completed · 656553 encontrados\r\n- Hallazgos seguridad: 32 (0 críticos)\r\n- Recomendaciones optimización: 6\r\n\r\n## Seguridad (prioritario)\n- **[HIGH]** Proceso en ubicación atípica: CodeSetup-stable-3.8.11.tmp\n  - C:\\Users\\Paterna\\AppData\\Local\\Temp\\is-1DQTO.tmp\\CodeSetup-stable-3.8.11.tmp\n- **[HIGH]** Proceso en ubicación atípica: CodeSetup-stable-3.8.11\n  - C:\\Users\\Paterna\\AppData\\Local\\Temp\\vscode-stable-user-x64-9f1spuh364q\\CodeSetup-stable-3.8.11.exe\n- **[MEDIUM]** Puerto abierto :49664 — lsass\n  - PID 1348\n- **[MEDIUM]** Puerto abierto :35172 — tailscaled\n  - PID 12376\n- **[MEDIUM]** Puerto abierto :24282 — python\n  - PID 7728\n- **[MEDIUM]** Puerto abierto :49665 — wininit\n  - PID 1172\n- **[MEDIUM]** Puerto abierto :49672 — services\n  - PID 1300\n- **[MEDIUM]** Puerto abierto :49667 — svchost\n  - PID 2500\n- **[MEDIUM]** Puerto abierto :49666 — svchost\n  - PID 1996\n- **[MEDIUM]** Puerto abierto :16686 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :7700 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :7070 — AnyDesk\n  - PID 24148\n- **[MEDIUM]** Puerto abierto :6334 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :9002 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :11434 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :9443 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :9090 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :49665 — wininit\n  - PID 1172\n- **[MEDIUM]** Puerto abierto :49664 — lsass\n  - PID 1348\n- **[MEDIUM]** Puerto abierto :37705 — tailscaled\n  - PID 12376\n- **[MEDIUM]** Puerto abierto :49666 — svchost\n  - PID 1996\n- **[MEDIUM]** Puerto abierto :54465 — AnyDesk\n  - PID 24148\n- **[MEDIUM]** Puerto abierto :49672 — services\n  - PID 1300\n- **[MEDIUM]** Puerto abierto :49667 — svchost\n  - PID 2500\n- **[MEDIUM]** Puerto abierto :8787 — wslrelay\n  - PID 18396\n- **[MEDIUM]** Puerto abierto :3030 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :135 — svchost\n  - PID 1604\n- **[MEDIUM]** Puerto abierto :54465 — AnyDesk\n  - PID 24148\n- **[MEDIUM]** Puerto abierto :3030 — wslrelay\n  - PID 18396\n- **[MEDIUM]** Puerto abierto :8787 — com.docker.backend\n  - PID 26176\n- **[MEDIUM]** Puerto abierto :7070 — AnyDesk\n  - PID 24148\n- **[MEDIUM]** Puerto abierto :5357 — System\n  - PID 4\n\n## Optimización arranque y servicios\n- **[critical]** Resolver: Proceso en ubicación atípica: CodeSetup-stable-3.8.11: C:\\Users\\Paterna\\AppData\\Local\\Temp\\vscode-stable-user-x64-9f1spuh364q\\CodeSetup-stable-3.8.11.exe\n- **[critical]** Resolver: Proceso en ubicación atípica: CodeSetup-stable-3.8.11.tmp: C:\\Users\\Paterna\\AppData\\Local\\Temp\\is-1DQTO.tmp\\CodeSetup-stable-3.8.11.tmp\n- **[medium]** Servicio Auto detenido: Avira Fallback Updater: Considera cambiar a Manual si no lo usas\n- **[medium]** Servicio Auto detenido: Servicio de herramienta de actualización de Google (GoogleUpdaterService150.0.7863.0): Considera cambiar a Manual si no lo usas\n- **[medium]** Servicio Auto detenido: Avira Security Updater: Considera cambiar a Manual si no lo usas\n- **[medium]** Servicio Auto detenido: Microsoft Edge Update Service (edgeupdate): Considera cambiar a Manual si no lo usas\n\n## Arranque configurado (6)\n- RoyalBrokerStartup: RoyalBrokerStartup.cmd\n- : \n- Docker Desktop: C:\\Program Files\\Docker\\Docker\\Docker Desktop.exe\n- AnyDesk: C:\\PROGRA~1\\AnyDesk\\AnyDesk.exe  --control\n- Tailscale: C:\\PROGRA~1\\TAILSC~1\\TAILSC~1.EXE \n- : \n\n## Procesos top RAM\n- powershell (PID 24112) 1701MB · C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\n- Cursor (PID 26308) 1021MB · C:\\cursor\\Cursor.exe\n- Cursor (PID 18000) 1007MB · C:\\cursor\\Cursor.exe\n- vmmemWSL (PID 14608) 812MB · \n- Cursor (PID 20552) 717MB · C:\\cursor\\Cursor.exe\n- Cursor (PID 5496) 401MB · C:\\cursor\\Cursor.exe\n- chrome (PID 30656) 347MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 8656) 330MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 4460) 258MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- chrome (PID 28176) 253MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- firefox (PID 30724) 207MB · C:\\Program Files\\Mozilla Firefox\\firefox.exe\n- firefox (PID 19012) 191MB · C:\\Program Files\\Mozilla Firefox\\firefox.exe\n- endpointprotection (PID 4936) 188MB · \n- chrome (PID 21244) 182MB · C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe\n- Cursor (PID 13972) 182MB · C:\\cursor\\Cursor.exe\n\r\n---\r\n_Pega este informe en Cursor Chat para análisis del asistente._\r\n_Incluye escaneo completo: 500000 entradas indexadas._",
    "user":  "Paterna"
}