If we knew what program was used to encrypt, the password would be an attack vector but we don't. The 256-bit key is the attack vector which must be discovered mathematically.

You will see that anyone who claims to have calculated the password(s) is larping because the password is not the input to AES, it's a hash.