Encrypted mal-ware detection