The reality is it can't really be done reliably. Although a regex string scan on the bytecode might yield some url like strings and you can probably decompile the applet anyway the problem is that (like with javascript) the actual link may be generated programatically ie it simply does not exist until runtime.

my $link = $prot . $domain . $script . $query;
[download]