Looking for Full Firmware / EDL Image – Boox Tab Ultra (Non-C)

[Slifer]

Hi again,

as mentioned in a previous post, I’m still trying to recover my soft-bricked Boox Tab Ultra (original B/W version, not C or Pro). Recovery and ADB work, but sideloading hasn’t resolved the boot issues.

I’m now looking for a full firmware image or EDL-compatible files for this specific model. If anyone has access to such files or knows where they might be shared, I’d really appreciate your help.

Thanks in advance!

[Renate]

The Tab Ultra has a full update here:

Model:  TabUltra (English)
Finger: Onyx/TabUltra/TabUltra:11/2025-04-02_12-29_v4.0-rel_6d15a71551/49344:user/release-keys
Link:   http://firmware-us.boox.com/266e3dc6e455a4bcbf99f8f7a7684349/update.upx
Size:   1,862,304,832
MD5:    266e3dc6e455a4bcbf99f8f7a7684349

There is also the 4.0.2 incremental update, but you should worry about that afterwards.

I've not got specific info about the processor on the TabUltra, but the Firehose loader for the Go6 would be a good starting point.
See: http://www.temblast.com/ref/onyxldr.htm
Please report what the HWID is. (It's not secret or specific to your unit.)

[Slifer]

Originally Posted by Renate

The Tab Ultra has a full update here:

Model:  TabUltra (English)
Finger: Onyx/TabUltra/TabUltra:11/2025-04-02_12-29_v4.0-rel_6d15a71551/49344:user/release-keys
Link:   http://firmware-us.boox.com/266e3dc6e455a4bcbf99f8f7a7684349/update.upx
Size:   1,862,304,832
MD5:    266e3dc6e455a4bcbf99f8f7a7684349

There is also the 4.0.2 incremental update, but you should worry about that afterwards.

I've not got specific info about the processor on the TabUltra, but the Firehose loader for the Go6 would be a good starting point.
See: http://www.temblast.com/ref/onyxldr.htm
Please report what the HWID is. (It's not secret or specific to your unit.)

Hi again,

Sorry for the late reply – I wanted to take some time before continuing and didn't get back as quickly as I should have.

I tried working with the poke6.bin Firehose loader. The device is detected successfully in EDL mode, and I was able to run commands like nop, w boot, and r boot without issues. However, printgpt and gpt don’t return anything, and I can’t retrieve the HWID either – it’s not shown in any command output.

I also tried peekhex 0x0 0x400 but couldn’t identify an obvious HWID string.

Any idea how I can proceed from here? Would a different loader help?

[Renate]

Show your work. I don't know what's going on.
How can you not get the HWID.
Use my EDL client, at least I know that.