The browser isn’t used, if you have undetected/hidden malware on your system that sends out spam - it uses its own very small SMTP element to send out spam from your system (not your webmail service). It uses normal email ports/protocols and as such should be intercepted by the Mail Shield to scan content before sending.