EventID:129 (Path:\\calc.exe OR Path:\\cscript.exe OR Path:\\mshta.exe OR Path:\\mspaint.exe OR Path:\\notepad.exe OR Path:\\regsvr32.exe OR Path:\\wscript.exe)