The "(tg)" suffix indicates the file originated from or is distributed via Telegram , a common platform for sharing tools, scripts, and occasionally malware within the developer and infosec subcultures.

Use a tool like Unblob to recursively extract and inspect the contents for malicious artifacts.

Codeby – Telegram