I the VM inside the host has a routed network that can connect to the ESXi host, there is nothing stopping you from using the host client and datastore browser or (win)SCP to copy down the files.

Are the networks isolated?