Inconsistency is observed between an incident snapshot and the original message.
Sometimes the message body is full of garbled (or encrypted) characters on the incident snapshot and it is different than the original message.
If you capture the SMTP traffic you will see that the message is written using the XEXCH50 commands.
The XEXCH50 is an Exchange ESMTP extension that is used to relay certain properties between Exchange servers.
XEXCH50 is not an RFC compliant SMTP message and at this point is not supported.