Systemd bonus flag 1

Systemd
Bonus Flag 1
The hint is that flag 3 has more info for us. There are a few rabbit holes to go down, but eventually, you may be tempted to look into the documentation, since this is clearly a malicious service and not just altered config files.
If we use “Find / -name *crond*”, since the file for flag 3 is crond.service, we see that there is a file called /usr/share/man/man8/crond.8.gz.
This file is compressed, so use “gunzip crond.8.gz” to unzip it.
Cat the file, see the documentation, get the flag.