The main difference is that the case I presented, although it may seem to be a stretch, there is a plausible reason for the two random-looking files to be present on one site (or the other). Whereas if each site only had one random-looking file, in neither case was there a plausible reason for that file to be there.