if winexe 1.00, export the ntlm hash