MD5 is broken in a sense that you can craft two different files with the same hash, but it's still hard to create a file with specific MD5 hash. So it's still

MD5 is broken in a sense that you can craft two different files with the same hash, but it's still hard to create a file with specific MD5 hash. So it's still good for identifying files that aren't specifically crafted to have a malicious counterpart.