verify-md5: support file name including spaces