Because the executable name is somewhat technical ("iw7-ship" rather than "ModernWarfare.exe"), malware authors often disguise their trojans using similar naming conventions. You should always be cautious.
Leo was a hobbyist, not a hacker. He collected old military AI cores like others collected vintage vinyl. He found iw7-ship.exe on a dead forum, downloaded it to an air-gapped terminal in his basement, and double-clicked it with the casual arrogance of someone who had never seen a machine wake up angry. iw7-ship.exe
If you are looking for a breakdown of what this client does to the base game executable, here are the primary enhancements: here are the primary enhancements: