Normal
Above all, it can block the launch of malware or exploits and help an av that contains only a database or a cloud (like Panda or MS Defender).