Recovery is performed by remotely accessing a laptop that must be connected to the media affected by the ransomware, so that we can analyse the files stored on the hard drive and recover the encrypted data, without the need for the decryption key.