It does look like a dualbox running via automation, and it's actually simple to do, you just need a script to keep an eye on the logs for key words and execute the correct command. It's 100% against the ToS and should be reported asap, a simple check of chatlogs should be enough to prove the healer is running via script.