Attachments sent and received within the application are stored inside the third-party application directory in the path: USERDATA /data/com.discord/cache/app_images_cache_small/v2.ols100.1, and not on the physical or emulated SD card or media directory.

What is even nicer is that the message details from the STORE_MESSAGES_CACHE we previously examined contain a URL that includes a timestamp that can be carved out of the message file itself. Believe it or not, many regular (and those deemed to be “secure”) chat applications use similar techniques when storing regular and even “secret” chat attachments.

It is important to note that deleted messages were not recovered from this application version.