Yeah, my IT company bitshifts suspect files and provides the magic number.

The protection just needs suficirntly complex.