Interesting: This file was sent to us at 12.35 german local time... Avast did not detect it...
Now I see Hub Mails from our exchange where the exchange plugin/shield blocked the MSG which is still/again called Rechnung_641175.msg...
Yet Virus total does not detect it... probably because virus total didn't got an update yet?
And now file shield is also detecting this MSG!!!!
So the result is: Avast has updated their AV signatures within less than an hour!
God work!!!!
P.S. Seems to be a phishing mail wave targeting germany... got Hub mails for to diffrent customers as well.