Which mode?

Malicious Windows operating system codes that share a single virtual address space, and can manage the system CPU and memory resources directly are running in which mode?
A. safe
B. user
C. kernel
D. privileged