No, those are fine, they are “salt” values used in various hashing functions. For security, every installation should have a different set of random salt strings.
Be aware that any time malicious code appears on your server, every single file on your server is suspect and could possibly contain a ‘backdoor’ a hacker could use to re-access the server even though you’ve removed the obvious infection.
Everything might be fine, but since you just started, to be on the absolute safe side, consider wiping out everything and re-installing. It goes a lot faster once you’ve gone through the process once. More information can be found on FAQ My site was hacked.
If you do keep that installation I would suggest that you change those salt keys as they are now public. Here is a generator: https://api.ww.wp.xz.cn/secret-key/1.1/salt/
Thanks guys. Got it now. Have a great day ahead.