The development of telecommunication was rising very quickly since the service instant message internet-based creep to Indonesia. Especially using smartphone Android also can to provide amount of use internet-based application, such as WhatsApp Messenger, Blackberry Messenger, Facebook Messenger, and others. Since on December 2017, WhatsApp users has reached 1,5 billion. Increased usage of the application is directly proportional to the increasing crime rate using the instant messaging app. Some crime cases start using the WhatsApp Messenger application to communicate as in the case of drugs, murder, sexting and others. Therefore, it is need to do the procedure mobile forensics to get digital evidence that will later be used in court. This research uses the technique of description database file WhatsApp application to read database file which is encrypted .crypt12 that keeps the conversations has been deleted. If compared with WhatsApp encryption version .crypt8, on the database .crypt12 is can save a lot of tables data related conversations. In besides that, an evidence also obtained like a contact number, voice calls, and media like photos and picture. The presence of WhatsApp lates version, that offers the service of renewal status, and also can found evidence of assosiated contact number and description status was ever seen by a WhatsApp account to WhatsApp contacts stored.