1. At least one machine readable medium comprising one or more instructions that when executed by a processor, cause the machine readable medium to: receive script data; determine a checksum tree for the script data; compare each checksum of the checksum tree to one or more subtree checksums; and assign one or more classifications to the script data.