Process Xh14EkkrTH.exe gets injected in explorer.exe.
You need to learn what hidden processes are.
No such thing under Linux!
I wouldn't dare to run it under Windows, though ;-)
Sure, plenty of linux RAT's available. Check Netwire for example.
Mac, Win, Linux.