Once? MD5 might be insecure these days, but it would still take a lot of time to bruteforce it. If it is bruteforcable within a sane timeframe, it's likely 7-8 characters, or a number.