You can't prove a file isn't malicious, but you can certainly stack the deck in your favor.