Autohotkey is a scripting language. You can't classify it as malware because someone might write malware with it. ... Sure but so can a batch file, a Python script or any executable. You should only run executable code or files from sources you trust.