These are unique identifiers that allow someone to log into your Discord account without a password, bypassing Two-Factor Authentication (2FA).
If you suspect you have been infected, change your Discord password immediately. This invalidates your current token and logs out all active sessions.
Compressed files can sometimes bypass basic email or browser scanners that might immediately flag a raw .exe file.