It has come to our attention that the MetaDefender collector may generate false positive alerts for samples when the MetaDefender API experiences outages and/or behaves unexpectedly.
A fix for this issue is in the works, but until then, alerts originating from the MetaDefender collector should be manually verified by visiting the sample link. In case 404 is returned, it should be considered a false positive alert.