Malware from vm to network

I have this friend that had this program that triggers many av's on virustotal but he had it for years without ever experiencing anything suspicious.

I want to analyze it on a vm which is easy enough to set up, however i'm not sure if the program is going to attack my network and so i want to know how to make it safe just in case so that my ohter devices host included are safe.