Subject-to-Filename parsing got confused by DKIM-Signature section of signed email. Changed regex to be more specific and resilient.