iirc, its a hash with server secret. The idea was you can tell if the dialog is the real one, not just some look-the-same dialog from random malware