Personally, I used 3 saves, rather than 2. This helps identify the correct location better by weeding out coincidental matches. If a hex value changes as expected with 3 comparisons between the files, it is unlikely to be from some different source.