Most likely - cmd.php sounds like a shell script. The SQL file is odd unless it's one of your databases that was dumped and meant to be retrieved. I would recommend having your server looked at