https://bugs.winehq.org/show_bug.cgi?id=46675
--- Comment #9 from tjb troyb@us.ibm.com --- (In reply to Zebediah Figura from comment #7)
I guess what I would do is first look at what file (or files) are being opened and left open, and see if I can deduce anything from that. If not, I'd probably try adding +relay, to see what Wine component, if any, is opening the file.
I am not familiar enough with the wine traces (yet) to be able to deduce if a file is being left open. I have attached 2 seconds of the +file+ntdll trace in case anyone wants to have a look and see if anything can be spotted. The only thing I can really do myself is look for a rep pattern of something anomalous happening in the logs on the order of twice per second.