James,
Yes, it has to spawn a process. It will only spawn if:
- There is an attachment
- The attached file is smaller than the bypass threshold.
When a new message arrives, the entire message stays in Xeams memory until it is completely processed. When an attachment is encountered, Xeams will save the attached file to a temp folder, spawn the configured program and capture the results.
There is a very good chance that 90% of the emails do not have anything attached and therefore, no spawning is required.