It usually corresponds to the LOGNAME variable in the system-state environment (but this variable could have been modified).
It typically aligns with the LOGNAME variable in the system state environment, even if it has been altered.