Below you can find Emotet registration request parsed by online protobuf decoder.

And here you can find the binary input dumped from running Emotet proces.

121049453857494e375f443035353039394318f4bc0620012d02d9bf4032e4026e6f74657061642e6578652c4878442e6578652c4f4c4c594442472e4558452c706f7765727368656c6c2e6578652c436f6d70617454656c52756e6e65722e6578652c736c75692e6578652c54727573746564496e7374616c6c65722e6578652c70726f636578702e6578652c56426f78547261792e6578652c536561726368496e64657865722e6578652c6578706c6f7265722e6578652c64776d2e6578652c7461736b686f73742e6578652c7370707376632e6578652c776c6d732e6578652c737368642e6578652c636f6e686f73742e6578652c63796772756e7372762e6578652c766d69637376632e6578652c73706f6f6c73762e6578652c56426f78536572766963652e6578652c737663686f73742e6578652c6c736d2e6578652c6c736173732e6578652c73657276696365732e6578652c77696e6c6f676f6e2e6578652c77696e696e69742e6578652c63737273732e6578652c736d73732e6578652c3a00

Hex stream input with registration request