Blocking specific scripts from running

Hi,

In order to take preventitive action against a threat I'd like to block a specific commands from being run (using application and device control).

The commands are:

C:\WINDOWS\system32\wscript.exe //e:VBScript thumb.db "Microsoft"

C:\WINDOWS\system32\wscript.exe //e:VBScript thumb.db "something"

C:\WINDOWS\system32\wscript.exe //e:VBScript thumb.db "something else"

As the the wording within "" does change, would it be acceptable, within block process section of Application control, to use:

C:\WINDOWS\system32\wscript.exe //e:VBScript thumb.db *

Or is there a better way to achieve the same result?

We are running SEP 12.1.5

Kind regards,

Mike