PMG-Mailfilter(Quarantine) ignored

I will try to get the sender to resend the testmail asap.

I got the mail to export from owa in eml without converting anything.

Code:
Received: from mailserver.destination.org (x.x.x.x) by
 mailserver.destination.org (x.x.x.x) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1779.2
 via Mailbox Transport; Thu, 12 Nov 2020 09:52:44 +0100
Received: from mailserver.destination.org (x.x.x.x) by
 mailserver.destination.org (x.x.x.x) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
 15.1.1779.2; Thu, 12 Nov 2020 09:52:44 +0100
Received: from external-pmg-dns-name (x.x.x.x) by
 mailserver.destination.org (x.x.x.x) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1779.2
 via Frontend Transport; Thu, 12 Nov 2020 09:52:44 +0100
Received: from external-pmg-dns-name (localhost.localdomain [127.0.0.1])
    by external-pmg-dns-name (Proxmox) with ESMTP id C72491082613
    for <recipient@destination.org>; Thu, 12 Nov 2020 09:52:44 +0100 (CET)
Received: from mout.example1.org (mout.example1.org [x.x.x.x])
    by external-pmg-dns-name (Proxmox) with ESMTP id 08DFA10825FF
    for <recipient@destination.org>; Thu, 12 Nov 2020 09:52:44 +0100 (CET)
Received: from winhex19beeu5.wineu.mail ([10.72.140.13]) by mrieue.server.lan
 (mrieue001 [172.19.128.220]) with ESMTPS (Nemesis) id
 0La4vW-1jsDTx03qA-00m1TC for <recipient@destination.org>; Thu, 12 Nov 2020
 09:52:43 +0100
Received: from winhex19beeu11.wineu.mail (10.72.140.16) by
 winhex19beeu5.wineu.mail (10.72.140.13) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.2.529.5;
 Thu, 12 Nov 2020 09:52:42 +0100
Received: from winhex19beeu11.wineu.mail ([fe80::fcee:d718:f360:a4a5]) by
 winhex19beeu11.wineu.mail ([fe80::fcee:d718:f360:a4a5%11]) with mapi id
 15.02.0529.010; Thu, 12 Nov 2020 09:52:42 +0100
From: Sender <user1@user-domain.de>
To: "Recipient" <recipient@destination.org>
Subject: test
Thread-Topic: test
Thread-Index: Ada40St0ghqnSi4tTtyu4ApD1OrITg==
X-MS-Exchange-MessageSentRepresentingType: 1
Date: Thu, 12 Nov 2020 08:52:42 +0000
Message-ID: <ac629a9927ec45b68b4ce30cb15350fa@user-domain.de>
Accept-Language: de-DE, en-GB, en-US
Content-Language: de-DE
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource: mailserver.destination.org
X-MS-Has-Attach: yes
X-MS-Exchange-Organization-Network-Message-Id:
    c1a61c01-60be-448c-4331-08d886e8528a
X-MS-TNEF-Correlator:
X-MS-Exchange-Organization-RecordReviewCfmType: 0
x-provags-id: V02::oa4qrm7RfKXjP7TH2dd3BB1SY/MNkI5BV94Qu3ILQlAlM
 VK1yAcXrolCb+9a3QmpELXebm0XBzNBhir122inMdaDo60sPsm
 vXzvFr3r+2+82bVlx4jmMmIAlX95z06s0JLyWZg2op/PWdfpmx
 qnJ7qUGODkxE92gMo4dZjFHXv76HnZ4/jSAhVoLsbgg/o44
x-spam-level: Spam detection results:  1    AWL                     0.158
 Adjusted score from AWL reputation of From: address    KAM_DMARC_STATUS
         0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
    KAM_LAZY_DOMAIN_SECURITY      1 Sending domain does not have any anti-forgery
 methods    RCVD_IN_DNSWL_NONE     -0.0001 Sender listed at
 https://www.dnswl.org/, no trust    RCVD_IN_MSPIKE_H2      -0.001 Average
 reputation (+2)    SPF_HELO_NONE           0.001 SPF: HELO does not publish an
 SPF Record    SPF_NONE                0.001 SPF: sender does not publish an SPF
 Record
x-originating-ip: [10.72.140.251]
received-spf: none (user-domain.de: No applicable sender policy available)
 receiver=external-pmg-dns-name; identity=mailfrom;
 envelope-from="user1@user-domain.de"; helo=mout.example1.org;
 client-ip=x.x.x.x
Content-Type: multipart/mixed;
    boundary="_004_ac629a9927ec45b68b4ce30cb15350fauser-domainde_"
MIME-Version: 1.0

--_004_ac629a9927ec45b68b4ce30cb15350fauser-domainde_
Content-Type: multipart/alternative;
    boundary="_000_ac629a9927ec45b68b4ce30cb15350fauser-domainde_"

--_000_ac629a9927ec45b68b4ce30cb15350fauser-domainde_
Content-Type: text/plain; charset="us-ascii"



--_000_ac629a9927ec45b68b4ce30cb15350fauser-domainde_
Content-Type: text/html; charset="us-ascii"

<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
    {font-family:"Cambria Math";
    panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
    {font-family:Calibri;
    panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
    {margin:0cm;
    margin-bottom:.0001pt;
    font-size:11.0pt;
    font-family:"Calibri",sans-serif;
    mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
    {mso-style-priority:99;
    color:#0563C1;
    text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
    {mso-style-priority:99;
    color:#954F72;
    text-decoration:underline;}
span.E-MailFormatvorlage17
    {mso-style-type:personal-compose;
    font-family:"Arial",sans-serif;
    color:windowtext;}
.MsoChpDefault
    {mso-style-type:export-only;
    font-family:"Calibri",sans-serif;
    mso-fareast-language:EN-US;}
@page WordSection1
    {size:612.0pt 792.0pt;
    margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
    {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:&quot;Arial&quot;,sans-serif"><o:p>&nbsp;</o:p></span></p>
</div>
</body>
</html>

--_000_ac629a9927ec45b68b4ce30cb15350fauser-domainde_--

--_004_ac629a9927ec45b68b4ce30cb15350fauser-domainde_
Content-Type: application/msword; name="test.doc"
Content-Description: test.doc
Content-Disposition: attachment; filename="test.doc"; size=30299;
    creation-date="Thu, 12 Nov 2020 08:52:39 GMT";
    modification-date="Thu, 12 Nov 2020 08:52:24 GMT"
Content-Transfer-Encoding: base64


..........

This is really strange.. :-/