The Cache.db-wal file contains a large amount of data that was temporarily cached in memory prior to being written to the Cache.db file. Much of the content is Welcome messages that come standard upon account creation. Upon further review, user-generated messages may also be located in this file.

Cached content may include:

•  User account information

•  Recipient’s username

•  Datetime stamp

•  Message in plaintext

•  “Encrypted” message

The “encrypted” message string can be decoded with Base 64 to reveal a new string, which, once decoded a second time, reveals the original message content.

This is just one example of an application that said it either encrypts or does not retain any chat data, when in fact the data was easily recovered. This application has since been updated and is not using the same mechanism to “encrypt” message data.