Native code, that is trusted on the basis of having been signed by a special editor cert which the user has to accept. You may have encountered it if you've ever used windows update. Not sandboxed at all, unlike Java.