The files are supposed to be played with the GRC app, correct? If so I think you need to intercept the (usually HTTPS) request(s) for the key made by the GRC Windows 11 app.
Btw can the said movie be played in a browser via say the GRC site? It may be an easier target.