On a mechanical hard drive, deleting a file doesn’t overwrite anything. It just removes it’s listing from the hard drive’s table of contents. An undelete program will read every sector of the hard drive and identify those areas with files on it that aren’t listed on the table of contents; to recover it, it just rebuilds that particular entry.
Latest Answers