Issue with NTLM

[wesallen]

Hey, hope all is well.

I am working on cracking some NTLM hashes. I am pretty sure I have the format correct and have matching plaintext for a small sample, but was having no luck. So, tried a couple different versions, .44,.45,.46 32bit on The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) and 64 bit on unbuntu 13, and even when using the NTLM sample files, no luck:

root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~# hashcat -m=1000 /root/hashcat-0.46/examples/A0.M1000.hash /root/hashcat-0.46/examples/A0.M1000.word
This copy of hashcat will expire on 01.01.2013. Please upgrade to continue using hashcat.

Initializing hashcat v0.44 by atom with 8 threads and 32mb segment-size...

Added hashes from file /root/hashcat-0.46/examples/A0.M1000.hash: 10 (1 salts)

NOTE: press enter for status-screen

Input.Mode: Dict (/root/hashcat-0.46/examples/A0.M1000.word)
Index.....: 1/1 (segment), 10 (words), 119 (bytes)
Recovered.: 0/10 hashes, 0/1 salts
Speed/sec.: - plains, - words
Progress..: 10/10 (100.00%)
Running...: --:--:--:--
Estimated.: --:--:--:--

Started: Fri Nov 29 07:04:48 2013
Stopped: Fri Nov 29 07:04:48 2013

But, this seems to work:

root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~# hashcat /root/hashcat-0.46/examples/A0.M0.hash /root/hashcat-0.46/examples/A0.M0.word
This copy of hashcat will expire on 01.01.2013. Please upgrade to continue using hashcat.

Initializing hashcat v0.44 by atom with 8 threads and 32mb segment-size...

Added hashes from file /root/hashcat-0.46/examples/A0.M0.hash: 102 (1 salts)

NOTE: press enter for status-screen

f9d68a3ef957245f752783b73959c2db:,n`eP,LxFL&T3J:paxxR1
06d714a833cbffc22f0fd686699e4b3a:vs\/u|
bc82d57d2a481df9a479346159beef8e:'>+S:T[1\*k>4uX@:2o}hNI9FtzeF\PST*`^GB6CK9\at+Q`G
6d15416d179f0444989e5a6d8193c5ad:&yg0#<RiAR:OF@M@K5^IU\
8f0f1cd4790cf5ab7ba473a1e968201f:8+`I
d3e6c8412ab76c9d24276d762a3af5fd:y?'c^+?'rZ1DJbO<vim`L*/MYibPQRKmb]3Y!!eZ
d32ce18738d408462d4676bd15fc4c10:Zd`kQ5>7{
...etc

Anythoghts?

[wesallen]

So, just to put this up there in case anyone else runs into this - the switch should be -m 1000 NOT -m=1000 that fixed my problem.

[atom]

thx