First and foremost, I don't recommend doing this yourself. I created an isolated virtual machine and used a firewall to prevent it from access the rest of my home network. Then I downloaded malware ...
ClickFix attack variants have been observed where threat actors trick users with a realistic-looking Windows Update animation in a full-screen browser page and hide the malicious code inside images.