[22-05-26] UMTv2/UMTPro UltimateMTK2 v3.5 - Oppo MT6835, Samsung and more...

UMT

Administrator
Admin
We are pleased to announce
UMTv2 / UMT Pro
Innovative and Intelligent


UltimateMTK2 v3.5
The Ultimate MediaTek Tool



umtmtk35.png



What's New:

GPLUS
- GPLUS Q20S

Lava
- Storm Lite (LXX517)

onn
- onn Kids Tablet (100044018)

Oppo
- A3X 5G (CPH2681)
- A5X 5G (CPH2733)

Samsung
- Galaxy A07 (SM-A075F) BIT-3
- Galaxy A22 5G (SM-A226B) BIT-B
- Galaxy Tab A9 (SM-X110) BIT-9

Added Oppo/OnePlus/Realme Dimensity 6300 (MT6835) Support (BROM)
- Select OPPO MT6835 (OPPO) from Exploit Type List
- Force BROM (3) may work if phone connects in Preloader
- Tested on A3X 5G Upto March 2026 Security Patch
- Other devices with same Chipset may also be supported

Improved FRP Reset 2025 Method
- Fixed timeout error issue on userdata erase

Improve Force BROM Method
- Now tested to work on Oppo A3X 5G

Some Other Minor Improvements






Special thanks to all our users who helped us with their test reports.


Important Notes:

- You can flash device with both BROM and Preloader mode
- If default DA does not work, use own DA in custom DA
- Force BROM may not work on new security, use Test Point instead
- When using Test Point, you must select Preloader in PL (not needed when flashing)
- If you need to connect device in Preloader mode, you must select PRELOADER in connection settings, otherwise software will try to Crash Preloader (may not work on new security devices)


Note : Some features are device/OS specific and may not work on all devices.


Please use
UMT Card Manager to Update Card Counter / Firmware / Activate Add-on, available via Support Access.



It Has Begun...
Keep Following Us...
Some Nice Updates Are On The Way...



SPECIAL THANKS TO OUR VALUABLE USERS FOR THEIR LOVE AND SUPPORT FOR MORE THAN 10 YEARS


WARNING :

ESN / MEID / IMEI REPAIR IS INTENDED TO REPAIR ESN / MEID / IMEI TO ORIGINAL ONE WRITTEN ON PHONE BACK LABEL / BOX. WE DO NOT ENDORSE OR ENCOURAGE ESN / MEID / IMEI CHANGING. ITS ILLEGAL. USER IS SOLE RESPONSIBLE FOR ANY ILLEGAL ACTIVITY DONE WITH USE OF FEATURES PROVIDED IN OUR SOFTWARE, NOT LIMITED TO ESN / MEID / IMEI.


ANY USER USING OUR SOFTWARE FOR ILLEGAL PURPOSE WILL BE SOLE RESPONSIBLE FOR HIS ACTS.
WE PROHIBIT USE OF OUR SOFTWARE FOR ANY ILLEGAL PURPOSE.




How to Download:
- Download UMT Support Access.
- Connect UMT Box/Dongle to PC and Run UMT Support Access.
- Download required Executable from Installer folder.
- Enjoy!
- Download Mirrors


PLEASE DO NOT POST OFF TOPIC HERE. ONLY POST REGARDING THIS UPDATE AND SUPPORTED MODELS. ANY OFF TOPIC POST WILL BE DELETED



Telegram


Br,
UMT
 
Oppo A3X (CPH2681) FRP Reset 2025

Code:
Brand/Model    :    Oppo / A3X 5G (CPH2681)
Operation    :    Reset FRP (2025)
LOCAL SLA    :    ON
BOOT CFG    :    [EXPLOIT: BROM (OPPO MT6835)]
Waiting for Device...Found
Port    :    MediaTek PreLoader USB VCOM_V1633 (Android) (COM9)
Device Path    :    \\?\usb#vid_22d9&pid_0006#5&120d90e6&0&1
#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Driver    :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
Mode    :    PRELOADER
Force Enter BROM...OK
Hw ID    :    MT6835 [1209] Dimensity 6100+
Details    :    8A00,CB00,0000
Sending Auth...OK
Sec. Config    :    [SBA:ON] [SLA:OFF] [DAA:ON]
[DAA:ON] Factory Singed DA Required!
Sending 1st DA...OK
Jump DA Address...OK
Reading Hardware Information...OK
EXT_RAM Not Initialized!
Waiting for Init...OK
Setup Hardware Init...OK
Reading Hardware Information...OK
VERSION    :    1.2
RNDM_ID    :    ff084737d59d71f775c89e9728d26cd5
PROD_ID    :    KRXK5P5PFUQGWGNR
RAM_SIZE    :    0x1E0800000 [7.51 GB]
STORAGE    :    D4ETRÕw2`? [EMMC]
TYPE    :    EMMC
BLOCK_SIZE    :    0x200
BOOT1 SIZE    :    0x0000000000400000 [4.00 MB]
BOOT2 SIZE    :    0x0000000000400000 [4.00 MB]
USER SIZE    :    0x0000001D1EC00000 [116.48 GB]
Sending DA2...Done
Authenticating...Done
SLA    :    ENABLED
Life-Cycle    :    OK
RPMB Key    :    UNKNOWN
Reading Partition Table...OK
boot.os_ver    :    13
boot.sec_patch    :    2026-01-01
init_boot.fprint    :    alps/hal_mgvi_64_armv82/mgvi_64
_armv82:13/TP1A.220905.001/1767862757756
init_boot.os_ver    :    13
init_boot.sec_patch    :    2026-01-01
odm_dlkm.fprint    :    alps/hal_mgvi_64_armv82/mgvi_64
_armv82:13/TP1A.220905.001/1767862757756
odm_dlkm.os_ver    :    13
oplus_custom_images.os_ver    :    11
oplus_custom_images.sec_patch    :    2020-10-05
prd.fprint    :    alps/sys_mssi_64_cn_armv82/mssi_64
_cn_armv82:14/UP1A.231005.007/1767883190813
prd.os_ver    :    14
prd.sec_patch    :    2026-01-01
sys.fprint    :    alps/sys_mssi_64_cn_armv82/mssi_64
_cn_armv82:14/UP1A.231005.007/1767883190813
sys.os_ver    :    14
sys.sec_patch    :    2026-01-01
sys_dlkm.fprint    :    alps/sys_mssi_64_cn_armv82/mssi_64
_cn_armv82:14/UP1A.231005.007/1767883190813
sys_dlkm.os_ver    :    14
sys_ext.fprint    :    alps/sys_mssi_64_cn_armv82/mssi_64
_cn_armv82:14/UP1A.231005.007/1767883190813
sys_ext.os_ver    :    14
sys_ext.sec_patch    :    2026-01-01
vendor_boot.fprint    :    alps/hal_mgvi_64_armv82/mgvi_64
_armv82:13/TP1A.220905.001/1767862757756
vendor_dlkm.fprint    :    alps/hal_mgvi_64_armv82/mgvi_64
_armv82:13/TP1A.220905.001/1767862757756
vendor_dlkm.os_ver    :    13
Bootloader    :    LOCKED
Running FRP Reset (2025)......Done
IMPORTANT    :    If phone reboots to recovery, simply Format from
there.
Operation Finished.
[UltimateMTK2 v3.5]

Br,
UMT
 
Oppo A3X (CPH2681) FRP Reset 2025

Code:
Brand/Model    :    Oppo / A3X 5G (CPH2681)
Operation    :    Reset FRP (2025)
LOCAL SLA    :    ON
BOOT CFG    :    [EXPLOIT: BROM (OPPO MT6835)]
Waiting for Device...Found
Port    :    MediaTek PreLoader USB VCOM_V1633 (Android) (COM9)
Device Path    :    \\?\usb#vid_22d9&pid_0006#5&120d90e6&0&1
#{a5dcbf10-6530-11d2-901f-00c04fb951ed}
Driver    :    MediaTek Inc., 3.0.1504.0 [usb2ser.sys]
Mode    :    PRELOADER
Force Enter BROM...OK
Hw ID    :    MT6835 [1209] Dimensity 6100+
Details    :    8A00,CB00,0000
Sending Auth...OK
Sec. Config    :    [SBA:ON] [SLA:OFF] [DAA:ON]
[DAA:ON] Factory Singed DA Required!
Sending 1st DA...OK
Jump DA Address...OK
Reading Hardware Information...OK
EXT_RAM Not Initialized!
Waiting for Init...OK
Setup Hardware Init...OK
Reading Hardware Information...OK
VERSION    :    1.2
RNDM_ID    :    ff084737d59d71f775c89e9728d26cd5
PROD_ID    :    KRXK5P5PFUQGWGNR
RAM_SIZE    :    0x1E0800000 [7.51 GB]
STORAGE    :    D4ETRÕw2`? [EMMC]
TYPE    :    EMMC
BLOCK_SIZE    :    0x200
BOOT1 SIZE    :    0x0000000000400000 [4.00 MB]
BOOT2 SIZE    :    0x0000000000400000 [4.00 MB]
USER SIZE    :    0x0000001D1EC00000 [116.48 GB]
Sending DA2...Done
Authenticating...Done
SLA    :    ENABLED
Life-Cycle    :    OK
RPMB Key    :    UNKNOWN
Reading Partition Table...OK
boot.os_ver    :    13
boot.sec_patch    :    2026-01-01
init_boot.fprint    :    alps/hal_mgvi_64_armv82/mgvi_64
_armv82:13/TP1A.220905.001/1767862757756
init_boot.os_ver    :    13
init_boot.sec_patch    :    2026-01-01
odm_dlkm.fprint    :    alps/hal_mgvi_64_armv82/mgvi_64
_armv82:13/TP1A.220905.001/1767862757756
odm_dlkm.os_ver    :    13
oplus_custom_images.os_ver    :    11
oplus_custom_images.sec_patch    :    2020-10-05
prd.fprint    :    alps/sys_mssi_64_cn_armv82/mssi_64
_cn_armv82:14/UP1A.231005.007/1767883190813
prd.os_ver    :    14
prd.sec_patch    :    2026-01-01
sys.fprint    :    alps/sys_mssi_64_cn_armv82/mssi_64
_cn_armv82:14/UP1A.231005.007/1767883190813
sys.os_ver    :    14
sys.sec_patch    :    2026-01-01
sys_dlkm.fprint    :    alps/sys_mssi_64_cn_armv82/mssi_64
_cn_armv82:14/UP1A.231005.007/1767883190813
sys_dlkm.os_ver    :    14
sys_ext.fprint    :    alps/sys_mssi_64_cn_armv82/mssi_64
_cn_armv82:14/UP1A.231005.007/1767883190813
sys_ext.os_ver    :    14
sys_ext.sec_patch    :    2026-01-01
vendor_boot.fprint    :    alps/hal_mgvi_64_armv82/mgvi_64
_armv82:13/TP1A.220905.001/1767862757756
vendor_dlkm.fprint    :    alps/hal_mgvi_64_armv82/mgvi_64
_armv82:13/TP1A.220905.001/1767862757756
vendor_dlkm.os_ver    :    13
Bootloader    :    LOCKED
Running FRP Reset (2025)......Done
IMPORTANT    :    If phone reboots to recovery, simply Format from
there.
Operation Finished.
[UltimateMTK2 v3.5]

Br,
UMT
perfect update team this operation with volume keys or test point
 
---------------------------
Error: Connection problems, no response received.

-------------------------

OK
I can't update or reset the counter, can you help me?
 
Back
Top