added heuristic for parsing broken malware manifests