diff --git a/AirlockTools.py b/AirlockTools.py
index 64bcb8c..098c737 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -451,6 +451,10 @@ def menu_prepare_to_enforce():
 				needsapproval = needsapproval.rename(columns={'publisher_x': 'publisher'})
 				needsapproval = needsapproval[['sha256', 'publisher', 'description', 'filename', 'hostname', 'username', 'productname', 'productversion','reputation_lastseen', 'reputation_scannermatch', 'reputation_scannercount','reputation_status', 'reputation_threatlevel', 'reputation_threatname','reputation_timestamp', 'pprocess', 'gprocess', 'commandline']]
 				
+				needsapproval['filename_key'] = needsapproval['filename'].apply(lambda x: x[0] if isinstance(x, list) and x else '')
+				needsapproval = needsapproval.sort_values(by='filename_key').drop(columns=['filename_key'])
+
+
 				needsapproval.to_csv(f"needs_approved\\hashes_rep_unknown_{first_policy}_{second_policy}.csv",index=False)
 				needsapproval.to_parquet(f"parquet\\hashes_rep_unknown_{first_policy}_{second_policy}.parquet",index=False)
 				ct.style_dataframe_dark(needsapproval, f"needs_approved\\hashes_rep_unknown_{first_policy}_{second_policy}.html")
@@ -477,6 +481,10 @@ def menu_prepare_to_enforce():
 				needsapproval = needsapproval.rename(columns={'publisher_x': 'publisher'})
 				needsapproval = needsapproval[['sha256', 'publisher', 'description', 'filename', 'hostname', 'username', 'productname', 'productversion','reputation_lastseen', 'reputation_scannermatch', 'reputation_scannercount','reputation_status', 'reputation_threatlevel', 'reputation_threatname','reputation_timestamp', 'pprocess', 'gprocess', 'commandline']]
 				
+				needsapproval['filename_key'] = needsapproval['filename'].apply(lambda x: x[0] if isinstance(x, list) and x else '')
+				needsapproval = needsapproval.sort_values(by='filename_key').drop(columns=['filename_key'])
+
+
 				needsapproval.to_csv(f"needs_approved\\hashes_rep_good_{first_policy}_{second_policy}.csv",index=False)
 				needsapproval.to_parquet(f"parquet\\hashes_rep_good_{first_policy}_{second_policy}.parquet", index=False)
 				ct.style_dataframe_dark(needsapproval, f"needs_approved\\hashes_rep_good_{first_policy}_{second_policy}.html")
@@ -503,6 +511,10 @@ def menu_prepare_to_enforce():
 				needsapproval = needsapproval.rename(columns={'publisher_x': 'publisher'})
 				needsapproval = needsapproval[['sha256', 'publisher', 'description', 'filename', 'hostname', 'username', 'productname', 'productversion','reputation_lastseen', 'reputation_scannermatch', 'reputation_scannercount','reputation_status', 'reputation_threatlevel', 'reputation_threatname','reputation_timestamp', 'pprocess', 'gprocess', 'commandline']]
 				
+				needsapproval['filename_key'] = needsapproval['filename'].apply(lambda x: x[0] if isinstance(x, list) and x else '')
+				needsapproval = needsapproval.sort_values(by='filename_key').drop(columns=['filename_key'])
+
+				
 				needsapproval.to_parquet(f"parquet\\hashes_rep_bad_{first_policy}_{second_policy}.parquet", index=False)
 				ct.style_dataframe_dark(needsapproval, f"needs_approved\\hashes_rep_bad_{first_policy}_{second_policy}.html")
 				
@@ -519,7 +531,7 @@ def menu_prepare_to_enforce():
 					df1 = tryToReadCSV(f"approved\\hashes_rep_unknown_{first_policy}_{second_policy}.csv")
 					df2 = tryToReadCSV(f"approved\\hashes_rep_good_{first_policy}_{second_policy}.csv")
 
-					all_approved_hashes = pd.concat([df1 , df2], ignore_index=True).sort_values(by=['sha256','filename'])
+					all_approved_hashes = pd.concat([df1 , df2], ignore_index=True).sort_values(by=['filename'])
 					print(ct.colorText(f"Approved hash lists have been combined","green"))
 
 					all_approved_hashes.to_parquet(f"parquet\\all_approved_hashes_{first_policy}_{second_policy}.parquet", index=False)