This was not found during brute forcing
It was found via disassembly - just not sure if it was before or after the announcement. What is published is a dissassembly.
It was also not done to be obscure (that would have been a crypted pwd). It was done so it is not seen on code source analysis/strings.