processes match and name files correctly
initial behavioral analysis