Before you run anything, upload the ISO to (free, up to 650MB). Look for detections on known malware families (Emotet, Sality, Ramnit). A few "hacktool" flags are normal for activators; trojan downloads are not.
Archive.org (The Internet Archive) is the primary home for "abandonware" and legacy software. Because Windows XP is no longer sold or supported by Microsoft, many users upload pre-patched ISO files there for historical preservation. How to Search Effectively: Archive.org Search for Windows XP SP4 Unofficial Look for uploads with high view counts positive reviews Check the "Files" section for windows xp sp4 iso archiveorg free