a) thats not how cold wallets work, they weren't supposed to be on a networked computer at all. b) check Teamviewer and remote desktop viewers. Especially the

a) thats not how cold wallets work, they weren't supposed to be on a networked computer at all. b) check Teamviewer and remote desktop viewers. Especially the ports those programs would typically use. It is a common attack vector to come in through those and view your machine, install key loggers as you, etc. Which leads to the next part: c) How was the 12 character password stored? Only in your head? In a password manager? in gmail? used in other areas?