diff --git a/app/lib/blobs.js b/app/lib/blobs.js
index dabf1e9..cd9aa46 100644
--- a/app/lib/blobs.js
+++ b/app/lib/blobs.js
@@ -95,7 +95,7 @@ module.exports = function (sbot, checkout_dir) {
           return cb(null, dst, false)
 
         // yes, check its hash
-        var hasher = createHash()
+        var hasher = createHash('sha256')
         pull(
           toPull.source(fs.createReadStream(dst)),
           hasher,
diff --git a/app/lib/windows.js b/app/lib/windows.js
index 41d9b25..81778ee 100644
--- a/app/lib/windows.js
+++ b/app/lib/windows.js
@@ -40,8 +40,9 @@ module.exports.open = function (url, sbot, blobs, opts, params) {
             )
           } else
             console.log(err) // :TODO: something nicer
-        } else
+        } else {
           shell.openItem(filepath)
+        }
       })
     } else {
       // open in the browser
diff --git a/package.json b/package.json
index 5cfb0a9..88569af 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "electron-prebuilt": "^0.28.2"
   },
   "dependencies": {
-    "multiblob": "^1.4.3",
+    "multiblob": "^1.5.0",
     "multicb": "^1.1.0",
     "muxrpc": "^5.0.1",
     "phoenix-api": "~8.1.0",