Bug: Box returns wrong XMD5 on filenames containing spaces

Hi, I'm using the WinSCP .net Assembly API on the client side to download files and then to compare the Box file MD5 checksum to the file download.  I'm getting the exact same XMD5 value returned for all files on Box that have a space in the name with that value being D41D8CD98F00B204E9800998ECF8427E

Here is the WinSCP logfile for the XMD5 command: (note Bolded identical MD5 for different files containing spaces in name. 

Size=679152;Modify=20190410213418.000;Create=20190410213418.000;Type=file; 1 plusdelta-perceptions.pdf
< 2022-10-10 11:50:23.775 250 Requested file action okay, completed.
. 2022-10-10 11:50:23.775 Size=679152;Modify=20190410213418.000;Create=20190410213418.000;Type=file; 1 plusdelta-perceptions.pdf
. 2022-10-10 11:50:23.775 Retrieving file information successful
. 2022-10-10 11:50:23.775 1 plusdelta-perceptions.pdf;-;679152;2019-04-10T21:34:18.000Z;4;"" [0];"" [0];---------;0
> 2022-10-10 11:50:23.775 XMD5 "/TEST/1 plusdelta-perceptions.pdf"
< 2022-10-10 11:50:23.817 251 ""/TEST/1 plusdelta-perceptions.pdf"" D41D8CD98F00B204E9800998ECF8427E

Retrieving file information successful
. 2022-10-10 11:50:27.400 Joe Smith.pdf;-;3478;2022-10-07T20:52:31.000Z;4;"" [0];"" [0];---------;0
> 2022-10-10 11:50:27.401 XMD5 "/TEST/Joe Smith.pdf"
< 2022-10-10 11:50:27.477 251 ""/TEST/Joe Smith.pdf"" D41D8CD98F00B204E9800998ECF8427E
< 2022-10-10 11:50:27.477 Script: d41d8cd98f00b204e9800998ecf8427e /TEST/Joe Smith.pdf

I've copied to the files on Box to make a duplicate and then remove the spaces from the name.  When I do that, Box returns the correct MD5 value which matches that calculated on the client after download.

Here is my application log file where I convert the byte stream value to a string and print in "dash formatted value". Note file without spaces in name is correct.

10/10/22-11:50:26 - Downloading file /TEST/Joe Smith.pdf
10/10/22-11:50:27 - (local checksum): 10-EB-25-7A-BC-8E-FF-18-4E-5D-C7-53-31-BA-38-9C (remote checksum): D4-1D-8C-D9-8F-00-B2-04-E9-80-09-98-EC-F8-42-7E
10/10/22-11:50:27 - Downloading file /TEST/JoeSmith.pdf
10/10/22-11:50:29 - (local checksum): 10-EB-25-7A-BC-8E-FF-18-4E-5D-C7-53-31-BA-38-9C (remote checksum): 10-EB-25-7A-BC-8E-FF-18-4E-5D-C7-53-31-BA-38-9C

I've contacted WinSCP and they believe this to be a Box bug.  Please advise