Will my email be passed?

[Blason_R]

I have MX set on cloud and have internal mail server; My question here is -

In background mode - Email will be passed and attachment will be sent for Emulation while
In Hold mode - Email will be cached and attachment will be sent for emulation. What if the attachment is malicious will the email be still passed without attachment or discarded which was cached?