If they’re using pure MD5 such that collisions work, then using steganography techniques to embed random bytes encrypted with some obvious cipher will bypass the initial autocensor while simultaneously driving the Chinese intelligence services crazy trying to decrypt the random bytes in every image sent. Note that using this approach may cause threat of harm to any sender or recipient within China’s sphere of influence.