[ihryjfbd]

There's more than one way to skin a cat.
I was thinking about running various browsers in sandboxed and seeing what new files it creates in it's cache folder, it doesn't just read the encrypted packets and play them back, it decrypts them first as temp files then plays back the decrypted files, if it puts the temp files straight into ram or your hdd idk yet, you can dump processes with pmdump.
Also there was a glitch in a earlier version of chrome that allowed you to capture these files.