I’m seeing some files named rechnung.pdf.exe detected as Troj/Downloader.gen!5564. Its probably the typical spammed virus often occurs on weekends.