DOS is hard to work with (compared to bash on linux, for example), but I managed to get something like this working locally:
Simple example using just :
as a deliminator (like in your example, where the MD5 hash is after the :
):
$ @echo hello:me
hello:me
$ for /f "tokens=1,2 delims==:" %a in ('echo hello:me') do @echo %b
me
tokens=1,2
: fetch tokens 1 & 2 - assign to %a %b respectively
delims==:
: tokenize on :
echo %b
: print token #2
Extrapolate to your case (which I can't reproduce locally, so this is a guess):
$ for /f "tokens=1,2 delims==:" %a in ('for /r %%f in (*) do (certutil -hashfile "%%f" MD5)') do @echo %b
See if that gets you closer.