Instead of searching for a potentially dangerous QCOW2 file, the safest method is to download an original Windows Vista ISO and convert it yourself.