Mine was a variable "UID" in /data/config/SystemCfg.CFG
Of other interest I noticed a connection to amazonaws, when I blocked it, it went to a lenovo server. I ended up blocking all non-LAN traffic to it, since I don't know why or what it is sending.
Probably video data for "cloud services" but...