Getting something attached to a compiled program without knowledge is possible but very unlikely.
Sites like virustotal should be used with some discernment. If 1 out of 70+ scanners indicates a problem, the likelihood of a false positive is high.
It's likely part of renpy itself being claimed. Nearly all programs (open source has it worse) have some rate of false detection, which is solved in various ways, like lodging an issue with the companies (https://github.com/renpy/renpy/issues/5314) . Renpy has had false positives a few times. Around 2021, the 32-bit exe was flagged because the mingw linux-to-windows compiler used had the style of calling in it's compiled output generally flagged by some scanners (made worse by a bug in the hash calculation for the compiled file renpy used).
Indeed, if you go to Renpy's download site: ( https://www.renpy.org/latest.html ) , download the latest .exe version, and immediately check that, it comes up with the exact detection you're seeing.