Not every Windows PC runs Edge's scareware blocker by default. Here's the hardware cutoff and how to turn it on manually.
How do you spot an attack when signatures and behaviors can no longer be used?