Excluding the Eset false positive possibility, I really believe whatever Eset detected as Win32/Kryptik.KGY originated from a file associated with the existing Adobe FlashPlayer installation. The downloaded FlashPlayer installer for the new version would be accessing the current version files to update/remove them to the current version equivalents.