volatility -f /path/to/memory/dump.001 --profile=<profile> filescan > filescan-results.txt
Look through the list of cached files for anything interesting, then run the following to extract it:
volatility -f /path/to/memory/dump.001 --profile=<profile> dumpfiles -n -r <filename> --dump-dir=./