Use the attached file called hashes and   then use Kali to crack the passwords.
You can use Hashcat is a password   cracking tool used by ethical hackers/ penetration testers to break down the   hash into a plaintext.
The best dictionary that   you can use is rockyou.txt wordlist.
You need to know the type of the hash function being used. This   can be done by hash-identifier.
 
Setup a windows XP image and follow the   instruction given in metasploitable part 2 where we have compromised windows   XP.
Follow the instruction and provide   screenshots for all the steps you did.
 
Configure a bootable USB that can be used to bypass windows   OS admin login