The thread handle that CreateProcess returns gets immediately closed in Popen._execute_child, so I can't see how this is due to subprocess. Please check to make sure these thread handles aren't for threads in your own process. Set the lower pane of Process Explorer to show the handle list. For a thread handle, the name field shows the executable name and PID of the process to which the thread is attached.