Crashing after October 13, 2020 .NET security update

Question

Our WPF application using SQLEXPRESS and .NET 3.5 has experienced continued problems since this security update was pushed to our users. We've tried installing the latest .NET update released on October 20th, but the issue persists. Viewing the windows event logs it appears as though the connection to SQLEXPRESS is dropped and the application is unable to reestablish a connection. After a handful of failed attempts this exception is logged in windows event viewer:

Faulting application name: MyApplication.exe, version: 1.0.0.0, time stamp: 0x5f74e613
Faulting module name: KERNELBASE.dll, version: 10.0.18362.1139, time stamp: 0xa8b891f5
Exception code: 0xe0434352
Fault offset: 0x0000000000043b29
Faulting process id: 0x374c
Faulting application start time: 0x01d6aba4daeaa9f8
Faulting application path: PathToMyApplication
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: dda39c66-5cdd-4b03-82a7-3acf74cd80de
Faulting package full name:
Faulting package-relative application ID:

This crash happens at random and does not correlate with a specific action inside the application. Is this a known issue? Is Microsoft working on another update for .NET? Thanks for any assistance.

Answer 1

Is the database set to auto close?

Answer 2

What is KB number of the last update you installed?

Does your application log managed exceptions, then you should post this info.
Only .NET Framework 4.x applications will get a full call stack logged in the event log (Event Source = .NET Runtime), so you either add a logger or run your application with a debugger attached.

Answer 3

The issue appears to be that the connection to SQLEXPRESS is lost. My app logs repeated "Login Failed" attempts for connecting to the database, but this after the app is already running and they have already established a connection to the database. This has never happened in 5+ years the app has been live. There are have been no recent releases for the application. The problem appears to be affecting all 300+ users. The exceptions logged from the app are inconsistent. The originate in different code files and happen during different actions. It appears the user attempts to do an action and the data connection is gone rendering null ref exceptions, etc. This is what is logged in the windows event viewer:

Application: MyApplication
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
at ViewModel1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].() at ViewModel1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]..ctor()
at .ctor()
at DynamicClass.lambda_method(System.Runtime.CompilerServices.Closure, System.Object[])
at Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()

Exception Info: Autofac.Core.DependencyResolutionException
at Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()
at Autofac.Core.Activators.Reflection.ReflectionActivator.ActivateInstance(Autofac.IComponentContext, System.Collections.Generic.IEnumerable1<Autofac.Core.Parameter>) at Autofac.Core.Resolving.InstanceLookup.Activate(System.Collections.Generic.IEnumerable1<Autofac.Core.Parameter>)
at Autofac.Core.Resolving.InstanceLookup.Execute()
at Autofac.Core.Resolving.ResolveOperation.GetOrCreateInstance(Autofac.Core.ISharingLifetimeScope, Autofac.Core.IComponentRegistration, System.Collections.Generic.IEnumerable1<Autofac.Core.Parameter>) at Autofac.Core.Resolving.ResolveOperation.Execute(Autofac.Core.IComponentRegistration, System.Collections.Generic.IEnumerable1<Autofac.Core.Parameter>)
at Autofac.ResolutionExtensions.TryResolveService(Autofac.IComponentContext, Autofac.Core.Service, System.Collections.Generic.IEnumerable1<Autofac.Core.Parameter>, System.Object ByRef) at Autofac.ResolutionExtensions.ResolveService(Autofac.IComponentContext, Autofac.Core.Service, System.Collections.Generic.IEnumerable1<Autofac.Core.Parameter>)
at Autofac.ResolutionExtensions.ResolveKeyed[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]
at ()
at ()
at MS.Internal.Commands.CommandHelpers.CriticalExecuteCommandSource(System.Windows.Input.ICommandSource, Boolean)
at System.Windows.Controls.Primitives.ButtonBase.OnClick()
at System.Windows.Controls.Button.OnClick()
at Telerik.Windows.Controls.RadButton.OnClick()
at System.Windows.Controls.Primitives.ButtonBase.OnMouseLeftButtonUp(System.Windows.Input.MouseButtonEventArgs)
at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.ReRaiseEventAs(System.Windows.DependencyObject, System.Windows.RoutedEventArgs, System.Windows.RoutedEvent)
at System.Windows.UIElement.OnMouseUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)
at System.Windows.Input.InputManager.ProcessStagingArea()
at System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs)
at System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport)
at System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32)
at System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
at System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
at System.Windows.Application.RunDispatcher(System.Object)
at System.Windows.Application.RunInternal(System.Windows.Window)
at App.Main()

This is what is logged in our apps error logs:

StackTrace: System.Data.EntityException: The underlying provider failed on Open. ---> System.Data.SqlClient.SqlException: Cannot open database "db" requested by the login. The login failed.
Login failed for user 'username'.
at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString userConnectionOptions, SessionData reconnectSessionData, DbConnectionPool pool, String accessToken, Boolean applyTransientFaultHandling, SqlAuthenticationProviderManager sqlAuthProviderManager)
at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionFactory.CreatePooledConnection(DbConnectionPool pool, DbConnection owningObject, DbConnectionOptions options, DbConnectionPoolKey poolKey, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionPool.CreateObject(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection)
at System.Data.ProviderBase.DbConnectionPool.UserCreateRequest(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection)
at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, TaskCompletionSource1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection) at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource1 retry, DbConnectionOptions userOptions) at System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource1 retry)
at System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource1 retry) at System.Data.SqlClient.SqlConnection.Open() at System.Data.EntityClient.EntityConnection.OpenStoreConnectionIf(Boolean openCondition, DbConnection storeConnectionToOpen, DbConnection originalConnection, String exceptionCode, String attemptedOperation, Boolean& closeStoreConnectionOnFailure) --- End of inner exception stack trace --- at System.Data.EntityClient.EntityConnection.OpenStoreConnectionIf(Boolean openCondition, DbConnection storeConnectionToOpen, DbConnection originalConnection, String exceptionCode, String attemptedOperation, Boolean& closeStoreConnectionOnFailure) at System.Data.EntityClient.EntityConnection.Open() at System.Data.Objects.ObjectContext.EnsureConnection() at System.Data.Objects.ObjectContext.SaveChanges(SaveOptions options) at System.Data.Entity.Internal.InternalContext.SaveChanges() at CMSII.Repository.RepositoryBase1.SaveChanges()
at CMSII.Desktop.Workspace.PreventPlant.CroplandAcres.CroplandAcresViewModel.Save()
at CMSII.Desktop.Workspace.PreventPlant.CroplandAcres.CroplandAcresViewModel.SaveChanges()
at MS.Internal.Commands.CommandHelpers.CriticalExecuteCommandSource(ICommandSource commandSource, Boolean userInitiated)
at System.Windows.Controls.Primitives.ButtonBase.OnClick()
at System.Windows.Controls.Button.OnClick()
at System.Windows.Controls.Primitives.ButtonBase.OnMouseLeftButtonUp(MouseButtonEventArgs e)
at System.Windows.RoutedEventArgs.InvokeHandler(Delegate handler, Object target)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised)
at System.Windows.UIElement.ReRaiseEventAs(DependencyObject sender, RoutedEventArgs args, RoutedEvent newEvent)
at System.Windows.UIElement.OnMouseUpThunk(Object sender, MouseButtonEventArgs e)
at System.Windows.RoutedEventArgs.InvokeHandler(Delegate handler, Object target)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(Object target, RoutedEventArgs routedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(Object source, RoutedEventArgs args, Boolean reRaised)
at System.Windows.UIElement.RaiseEventImpl(DependencyObject sender, RoutedEventArgs args)
at System.Windows.UIElement.RaiseTrustedEvent(RoutedEventArgs args)
at System.Windows.Input.InputManager.ProcessStagingArea()
at System.Windows.Input.InputManager.ProcessInput(InputEventArgs input)
at System.Windows.Input.InputProviderSite.ReportInput(InputReport inputReport)
at System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr hwnd, InputMode mode, Int32 timestamp, RawMouseActions actions, Int32 x, Int32 y, Int32 wheel)
at System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr hwnd, WindowMessage msg, IntPtr wParam, IntPtr lParam, Boolean& handled)
at System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr hwnd, Int32 msg, IntPtr wParam, IntPtr lParam, Boolean& handled)
at MS.Win32.HwndWrapper.WndProc(IntPtr hwnd, Int32 msg, IntPtr wParam, IntPtr lParam, Boolean& handled)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(Object o)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Int32 numArgs)
at System.Windows.Threading.ExceptionWrapper.TryCatchWhen(Object source, Delegate callback, Object args, Int32 numArgs, Delegate catchHandler)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(DispatcherPriority priority, TimeSpan timeout, Delegate method, Object args, Int32 numArgs)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr hwnd, Int32 msg, IntPtr wParam, IntPtr lParam)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(MSG& msg)
at System.Windows.Threading.Dispatcher.PushFrameImpl(DispatcherFrame frame)
at System.Windows.Application.RunDispatcher(Object ignore)
at System.Windows.Application.RunInternal(Window window)
at CMSII.Desktop.App.Main()

StackTrace: System.Data.SqlClient.SqlException (0x80131904): Cannot open database "db" requested by the login. The login failed.
Login failed for user 'username'.
at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString userConnectionOptions, SessionData reconnectSessionData, DbConnectionPool pool, String accessToken, Boolean applyTransientFaultHandling, SqlAuthenticationProviderManager sqlAuthProviderManager)
at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionFactory.CreatePooledConnection(DbConnectionPool pool, DbConnection owningObject, DbConnectionOptions options, DbConnectionPoolKey poolKey, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionPool.CreateObject(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection)
at System.Data.ProviderBase.DbConnectionPool.UserCreateRequest(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection)
at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, TaskCompletionSource1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection) at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource1 retry, DbConnectionOptions userOptions) at System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource1 retry)
at System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource`1 retry)
at System.Data.SqlClient.SqlConnection.Open()
at System.Data.EntityClient.EntityConnection.OpenStoreConnectionIf(Boolean openCondition, DbConnection storeConnectionToOpen, DbConnection originalConnection, String exceptionCode, String attemptedOperation, Boolean& closeStoreConnectionOnFailure)
ClientConnectionId:2837eda6-12c7-486a-808e-a22e65de9cae
Error Number:4060,State:1,Class:11

StackTrace: System.ObjectDisposedException: The ObjectContext instance has been disposed and can no longer be used for operations that require a connection.
at System.Data.Objects.ObjectContext.EnsureConnection()
at System.Data.Objects.ObjectQuery1.GetResults(Nullable1 forMergeOption)
at System.Data.Objects.DataClasses.EntityCollection1.Load(List1 collection, MergeOption mergeOption)
at System.Data.Objects.DataClasses.RelatedEnd.DeferredLoad()
at System.Data.Objects.Internal.LazyLoadBehavior.LoadPropertyTItem
at System.Data.Objects.Internal.LazyLoadBehavior.<>c__DisplayClass0_0`2.<GetInterceptorDelegate>b__1(TProxy proxy, TItem item)

Answer 4

SQL ERROR LOG:

2020-10-27 13:15:24.14 Server Microsoft SQL Server 2016 (SP1) (KB3182545) - 13.0.4001.0 (X64)
Oct 28 2016 18:17:30
Copyright (c) Microsoft Corporation
Express Edition (64-bit) on Windows 10 Pro 6.3 <X64> (Build 19041: )

2020-10-27 13:15:24.18 Server UTC adjustment: -5:00
2020-10-27 13:15:24.18 Server (c) Microsoft Corporation.
2020-10-27 13:15:24.20 Server All rights reserved.
2020-10-27 13:15:24.20 Server Server process ID is 5936.
2020-10-27 13:15:24.20 Server System Manufacturer: '', System Model: ''.
2020-10-27 13:15:24.20 Server Authentication mode is WINDOWS-ONLY.
2020-10-27 13:15:24.20 Server Logging SQL Server messages in file ''.
2020-10-27 13:15:24.21 Server The service account is 'NT Service\MSSQL$SQLEXPRESS'. This is an informational message; no user action is required.
2020-10-27 13:15:24.21 Server Registry startup parameters:
-d C:\Program Files\Microsoft SQL Server\MSSQL13.SQLEXPRESS\MSSQL\DATA\master.mdf
-e C:\Program Files\Microsoft SQL Server\MSSQL13.SQLEXPRESS\MSSQL\Log\ERRORLOG
-l C:\Program Files\Microsoft SQL Server\MSSQL13.SQLEXPRESS\MSSQL\DATA\mastlog.ldf
2020-10-27 13:15:24.21 Server Command Line Startup Parameters:
-s "SQLEXPRESS"
2020-10-27 13:15:24.25 Server SQL Server detected 1 sockets with 2 cores per socket and 4 logical processors per socket, 4 total logical processors; using 4 logical processors based on SQL Server licensing. This is an informational message; no user action is required.
2020-10-27 13:15:24.25 Server SQL Server is starting at normal priority base (=7). This is an informational message only. No user action is required.
2020-10-27 13:15:24.26 Server Detected 8075 MB of RAM. This is an informational message; no user action is required.
2020-10-27 13:15:24.26 Server Using conventional memory in the memory manager.
2020-10-27 13:15:31.90 Server Default collation: SQL_Latin1_General_CP1_CI_AS (us_english 1033)
2020-10-27 13:15:33.69 Server Buffer pool extension is already disabled. No action is necessary.
2020-10-27 13:15:35.50 Server InitializeExternalUserGroupSid failed. Implied authentication will be disabled.
2020-10-27 13:15:35.50 Server Implied authentication manager initialization failed. Implied authentication will be disabled.
2020-10-27 13:15:35.92 Server The maximum number of dedicated administrator connections for this instance is '1'
2020-10-27 13:15:35.93 Server This instance of SQL Server last reported using a process ID of 3232 at 10/27/2020 1:14:38 PM (local) 10/27/2020 6:14:38 PM (UTC). This is an informational message only; no user action is required.
2020-10-27 13:15:35.94 Server Node configuration: node 0: CPU mask: 0x000000000000000f:0 Active CPU mask: 0x000000000000000f:0. This message provides a description of the NUMA configuration for this computer. This is an informational message only. No user action is required.
2020-10-27 13:15:35.97 Server Using dynamic lock allocation. Initial allocation of 2500 Lock blocks and 5000 Lock Owner blocks per node. This is an informational message only. No user action is required.
2020-10-27 13:15:35.97 Server Database Instant File Initialization: disabled. For security and performance considerations see the topic 'Database Instant File Initialization' in SQL Server Books Online. This is an informational message only. No user action is required.
2020-10-27 13:15:36.01 Server Query Store settings initialized with enabled = 1,
2020-10-27 13:15:36.12 spid5s Starting up database 'master'.
2020-10-27 13:15:36.38 Server CLR version v4.0.30319 loaded.
2020-10-27 13:15:36.70 Server Common language runtime (CLR) functionality initialized using CLR version v4.0.30319 from C:\Windows\Microsoft.NET\Framework64\v4.0.30319.
2020-10-27 13:15:37.97 spid5s SQL Server Audit is starting the audits. This is an informational message. No user action is required.
2020-10-27 13:15:38.00 spid5s SQL Server Audit has started the audits. This is an informational message. No user action is required.
2020-10-27 13:15:38.45 spid5s SQL Trace ID 1 was started by login "sa".
2020-10-27 13:15:38.53 spid5s Server name is 'SQLEXPRESS'. This is an informational message only. No user action is required.
2020-10-27 13:15:38.56 spid10s The certificate [Cert Hash(sha1) "8B930404942A216E4F2DBBB9F28279C2ED3F28C3"] was successfully loaded for encryption.
2020-10-27 13:15:38.56 spid10s Server local connection provider is ready to accept connection on [ \.\pipe\SQLLocal\SQLEXPRESS ].
2020-10-27 13:15:38.56 spid10s Server local connection provider is ready to accept connection on [ \.\pipe\MSSQL$SQLEXPRESS\sql\query ].
2020-10-27 13:15:38.63 spid10s Dedicated administrator connection support was not started because it is disabled on this edition of SQL Server. If you want to use a dedicated administrator connection, restart SQL Server using the trace flag 7806. This is an informational message only. No user action is required.
2020-10-27 13:15:38.63 spid10s SQL Server is now ready for client connections. This is an informational message; no user action is required.
2020-10-27 13:15:38.64 Server SQL Server is attempting to register a Service Principal Name (SPN) for the SQL Server service. Kerberos authentication will not be possible until a SPN is registered for the SQL Server service. This is an informational message. No user action is required.
2020-10-27 13:15:38.67 spid5s Starting up database 'msdb'.
2020-10-27 13:15:38.67 spid6s Starting up database 'mssqlsystemresource'.
2020-10-27 13:15:38.68 Server The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ SQLEXPRESS ] for the SQL Server service. Windows return code: 0xffffffff, state: 63. Failure to register a SPN might cause integrated authentication to use NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies and if the SPN has not been manually registered.
2020-10-27 13:15:38.73 spid6s The resource database build version is 13.00.4001. This is an informational message only. No user action is required.
2020-10-27 13:15:39.06 spid6s Starting up database 'model'.
2020-10-27 13:15:39.26 spid6s Polybase feature disabled.
2020-10-27 13:15:39.26 spid6s Clearing tempdb database.
2020-10-27 13:15:39.52 spid6s Starting up database 'tempdb'.
2020-10-27 13:15:39.80 spid13s The Service Broker endpoint is in disabled or stopped state.
2020-10-27 13:15:39.80 spid13s The Database Mirroring endpoint is in disabled or stopped state.
2020-10-27 13:15:39.95 spid13s Service Broker manager has started.
2020-10-27 13:15:39.96 spid5s Recovery is complete. This is an informational message only. No user action is required.
2020-10-27 13:15:50.13 Server Software Usage Metrics is disabled.
2020-10-27 13:20:55.79 spid51 Using 'dbghelp.dll' version '4.0.5'
2020-10-27 13:21:28.48 spid51 Attempting to load library 'xplog70.dll' into memory. This is an informational message only. No user action is required.
2020-10-27 13:21:28.52 spid51 Using 'xplog70.dll' version '2015.130.1601' to execute extended stored procedure 'xp_msver'. This is an informational message only; no user action is required.
2020-10-27 13:21:28.83 spid51 Starting up database 'db'.
2020-10-27 13:50:17.84 Server SQL Server is terminating because of a system shutdown. This is an informational message only. No user action is required.
2020-10-27 13:50:18.43 spid13s Service Broker manager has shut down.
2020-10-27 13:50:18.49 spid13s Error: 17054, Severity: 16, State: 1.
2020-10-27 13:50:18.49 spid13s The current event was not reported to the Windows Events log. Operating system error = (null). You may need to clear the Windows Events log if it is full.
2020-10-27 13:50:18.64 spid5s .NET Framework runtime has been stopped.
2020-10-27 13:50:18.79 spid5s SQL Server shutdown has been initiated
2020-10-27 13:50:18.79 spid5s SQL Trace was stopped due to server shutdown. Trace ID = '1'. This is an informational message only; no user action is required.

Answer 5

Last updates installed:

KB4578968 - .NET security update

&

KB4579311 - windows 10 cumulative update