It's a means to detect sandboxing, either for testing or to foil analysis attempts by third parties.