Do you know what hash digests are? It doesn't "know" what the data is. It compares the data to a hash digest of know malware.

{

If (4D616C77617265{data scanned}==4D616C77617265

then (kill service)

}

This is not secret information.