Your 'friend' did.
Since you have no way of knowing if a file came from a legal or illegal licensed version of Creo, you have done nothing wrong, yet.
Do not open his files as you now know they cam from an illegal version.
Reporting him to PTC is your option.
If he was not aware that the license file was illegal, then he may be clear, too.
If he intentionally purchase3d an illegal license, then PTC could confiscate it with no reimbursement.
PTC may want to know who he bought the license from so they can go after the source.
I doubt the license file put anything malicious in the files beyond some check string that PTC writes to legal files. That is how they detect illegal files since the check strings do not match.
"Wildfires are dangerous, hard to control, and economically catastrophic."
Ben Loosli