I'll give you a better one. On a 64 bit Windows:

- the 64 bit binaries are stored in C:\Windows\System32

- the 32 bit binaries are stored in C:\Windows\SysWOW64

I'm guessing it's because module names are sometimes used without the extension and "ntdll" looks better in such a list than "nt".

I think it’s because the kernel’s module name is “nt”. It’ll show up like that in stack traces on occasion.

Not sure! My guess is the name would've just felt too short otherwise.