Even the case of the drive letter is the same (i.e. isn’t it e.g. C:\something, but d:\something)?
Anyway, the list of drives is received from the mount manager - so the order may be arbitrary. I believe they are sorted before getting scanned, so it is somehow interesting, but I certainly wouldn’t expect any virus to be involved.