I hope people know that MD5 is not secure at all. It is not a
cryptographic hash function, which means that a malware author could manipulate their executable so that it generates the same MD5 as the valid Kindle for PC executable. This is quite easy to do with a program like HashClash. SHA-1 is also insecure. You should instead give out SHA-256 hashes