I assume you have checked this cuz it does sound like some sort of caching/oplocks problem, especially the wait time seen before anything happens, but cant rule out some other AV/security type thing happening. Microsoft Defender can be slow letting things through so I disable it from monitoring some folders. Even when there is no web browser open or any other client app using the web, Wireshark will show a windows box communicates with Microsoft online all the time.