so obviously its md5, and the salt is contained within db entry, but what method are they using to get the unicode characters back into hex strings that most password crackers utilize for reversing md5?
I don't think they're salting their passwords.
I'm using John The Ripper to crack these worthless "123456" md5-crypt passwords.