SHA256 collision

Our antivirus hit on a file today. The SHA256 in VT matches a Trojan. The help desk manager is adamant that this file is safe but I feel like this needs more scrutiny. Apparently this is a very old executable and the file server it’s on has had SentielOne for quite some time. I feel like we need to question the file’s integrity given that this hit all of the sudden. Are there better ways to approach this? Am I …

antivirus collision cybersecurity file help desk manager old safe server sha256 today trojan