(Yeah after investigating via a different client it's very obviously an attack, but goodness, there is a lot going on here and it's good enough to get inboxed and look very plausible given a specific configuration of software that the targets of this email very plausibly have.)