Software is stored on hard drives and used to perform actions. Each file has a type, version, size, RAM usage, and sometimes a license.

Common actions include:

• Download and upload
• Install and kill
• Delete
• Hide and seek
• Run anti-virus
• Create text files and folders
• Format a hard drive

Formatting a hard drive is destructive. It removes files from the selected machine and disconnects users from that machine. Clan hard-drive formatting is restricted to the clan Master.

Version controls strength. A higher version cracker can defeat weaker password hashing, a stronger firewall can block weaker exploits, and a stronger seeker can reveal weaker hidden files.

Size affects storage space and task duration. Larger files take longer to transfer, delete, hide, seek, install, or kill.

Running software consumes RAM. You cannot run software if the total RAM usage would exceed your available memory.

Researchable software must be licensed before it can be researched. Downloaded software is not automatically licensed to you.

Crackers perform brute-force attacks against server passwords and bank accounts. Your cracker version also determines mission level access.

Password Hashing defends against brute-force attacks.

Port Scanner checks whether a target is vulnerable to exploit attacks.

Exploits are used after a port scan.

• FTP exploit allows file transfer access.
• SSH exploit allows process and file management access.
• Both together can provide root-like access.

Firewall strength can block exploit access.

Firewall defends against exploit attacks, Nmap scans, and, after the relevant certification, can mitigate DDoS attacks.

Hider hides software files. Running software cannot be hidden.

Seeker reveals hidden files when the seeker version is strong enough.

Spam, Warez, Miner, and DDoS viruses are installed on other machines. Money-making viruses require a Virus Collector to collect income. See Viruses.

Torrent supports Warez Virus income.

Virus Collector collects income from money-making viruses and applies a version-based bonus.

DDoS Breaker is required to complete DDoS attacks.

Anti-Virus deletes visible installed viruses when its version is strong enough.

Nmap scans the network for connected IPs. Firewalls can protect against it.

Hardware Analyzer scans a target's hardware and stores results in your Hacked Database. Accuracy depends on version.

Wallet stores public Bitcoin wallet information. Private keys are exposed only through specific Bitcoin-related log situations. See Bitcoin.

Webserver lets eligible users show custom public content on their own server IP. It does not work on normal player gameplay unless the account has the required access.

Riddle software exists on puzzle NPCs and reveals the current riddle challenge. It cannot be downloaded or modified like normal software.

Doom is storyline software. Its exact round behavior may change depending on current game settings. See Storyline.