1. A method of determining software trustworthiness, comprising: installing on a clean machine a software package identified as including at least one file of unknown trustworthiness; generating a report package including a catalog of files that have been installed or modified on the clean machine by the software package; determining identification attributes for each of the files in the catalog; processing each of the files in the catalog to assign a level of trustworthiness thereto; and providing the report package as output.