#!/bin/bash
FLASHPID=$( ps axo "%p %c %a" | grep [f]lashplayer | awk '{ print $1; }' )
if [ -z "$FLASHPID" ]
then
echo "Flash not found."
exit
fi
for i in /proc/$FLASHPID/fd/*
do
ACTFILE=$( readlink -f $i )
if [ -n "$( echo $ACTFILE | grep "(deleted)" )" ]
then
cp $i "$1"
exit
fi
done