https://technet.microsoft.com/en-us/library/ee844118(WS.10).aspx
bypass whitelist
https://gist.github.com/cnbird1999/13735007b945a54ef981
http://www.room362.com/blog/2014/01/16/application-whitelist-bypass-using-ieexec-dot-exe/
http://zh.wikipedia.org/zh/ClickOnce
https://msdn.microsoft.com/en-us/library/aa970051%28v=vs.110%29.aspx
https://github.com/subTee/Malwaria
CVE2014-4113
https://www.youtube.com/watch?v=j-r6UonEkUw