Hello,
There is a default application control policies called "Block applications from running [AC1]" OR Stop software installers [AC8]
Simply add the applications you want to block (by name or MD5 hash) into the policy where instructed and that will block them.
Regards,