Also as a clue there are some .txt files that are part of the upgrade. If your person knows what files were previously modified they could look at the file(s) to try to determine which files were changed.
It would have been in the last zip file downloaded used for the upgrade.
I believe there are two in the install folder.
