menuPass uses scripts to enumerate IP ranges on the victim network. menuPass has also issued the command "net view /domain" to a PlugX implant to gather information about remote systems on the network.