https://www.virustotal.com/gui/file/5b489c671f8d52d5a33e95e27b8dc4b3de0690589756...
Look at this report. As a hint, it is not malware, but it triggers 59/72 scanners. It is an interpreter for old adventure games.
What both reports have in common, the scanners do not agree what it is and alert a lot of generic things. Look for the keywords gen and heu. If one of those files would be a clear cut known virus, I would assume the trigger messages would be more specific and would agree more. That is actually quite a strong hint, that it might not be malware after all. Think about it. Malware spreaders can use scanners too. If your average scanner would flag it, why bother spreading it.
I saw about a thousand malware and other bad projects on Itch. And that number is not an overstatement. The project in question does not fit the usual patterns. I feel like I have seen just about everything. Including malware that does not trigger at all and malware that was signed. The usual malware triggers a dozen or so, or less. Obvious malware would have been cought by Itch's scanners. They do scan files.
Now, to be clear, that is not proof for anything. Could still be malware. What I am saying, positive triggers or lack thereof are not enough. Consider the circumstances and context. There are some game engines and compiling methods that will trigger. Godot is notorious for that and renpy, but also some rpg versions and other engines. Which is a very bad situation for indie game developers. Asking the developer if something is a virus is of little use. A criminal will lie and give the same answer as an honest dev. And there is always the possibility of an infected developer computer uploading an infected version unknowingly.
You can try to verify the developer, instead of the file. If the developer is on several socials and they link to each other, that is usually a good indicator, that the account owner is not an impostor. I seen such impostors, complete with link to socials of the original. I've even seen original and fake side by side on Itch.
tl;dr if you sent a report and nothing happened, support did not agree with your finding. Either because they were busy and have not worked on your report yet or because they have reasons to not agree.