DIAGCAB files are diagnostic troubleshoot files introduced in Windows Vista. DIAGCAB files can be created & signed by attackers to execute code on the machine.
Treat DIAGCAB files as executables. Block the execution of these files from unknown publishers. If feasible, block the download and execution of DIAGCAB files.