Poison

I need help with priv esc. A few days ago, I noticed a service running on some port as root. The service was using the unzipped file for authentication. Due to lack of time I could not complete the ctf at that time.

However, now when i am trying to enumerate the box, there is no such service running. I tried to reset the box few times and see if there is anything to do with this but nothing changed.

A bit of help would be appreciated.